Skip to content

Free for nonprofits, NGOs, think tanks, and institutes. Grant funded by James Scott, administered by the Embassy Row Project.

ArtOfTheHack home

KRYOS-XS Hypercube method

Cryptographic Provenance and Hash Chaining

Every decision carries a tamper-evident digest of its inputs, policy state, model versions, and outputs, so it can be replayed and verified independently.

What it is

The method in plain terms

At the moment of adjudication, the evidence set, the policy configuration in force, the reasoning and scoring versions, and the resulting determination are hashed together into a digest stored with the record.

Any later party can recompute the digest. If a single input, version, or output changed after the fact, the digest no longer matches and the alteration is evident.

Why it matters

Nonprofit security decisions are reviewed years later by boards, funders, auditors, journalists, and sometimes courts. A narrative reconstruction is not evidence. A verifiable digest is.

Applied

How it is used in a nonprofit environment

  • Substantiating a funder attestation with records the funder can verify independently
  • Demonstrating to a board that a decision followed policy as it existed at the time
  • Preserving an incident record that survives staff turnover

Limits

Where the method stops

  • Provenance proves the record was not altered; it does not prove the decision was correct
  • Verification requires the grantee to retain the exported ledger

The audit trail belongs to the grantee and is exportable at any time, including after the grant period ends.