[Audit] Re: Verification [was: Re: Next Wave of Updates for the Proposed Audit Charter - please review and comment]

[Lars Kersten Kroehl <[e-mail]>]

Henri, Mirja, Iman —

The digest clause carries a dependency we should put on the record now. A digest of external state only becomes comparable across implementations once the canonicalization is fixed, since two parties reading the same revocation response and hashing it each their own way produce different digests and conclude they disagree about the state itself. That belongs to the group's work and not in the charter sentence. So I am flagging it here instead of proposing more text.

Lars 



> Am 24.09.2026 um 07:28 schrieb Henri Sirkkavaara <[e-mail]>:
> 
> Mirja, Lars, Iman,
> 
> I agree with both additions. Folded into one sentence for deliverable 3: a record is verifiable if a relying party can recompute its verdict from the record and published keys without trusting the issuer, and the record states which checks were performed, the external state each depended on, a digest of that state as read, and when it was read.
> 
> Henri Sirkkavaara
> Vaara - Accountable Autonomy
> Built to see over the noise.
> vaara.io <https://vaara.io/>Helsinki, Finland