A CLOSED ROOM
A governed place where the record is a byproduct of the decision.
On Exedra Gate the work that generates evidence happens inside the system rather than
around it. Identity, documents, contracts, signatures, approvals, deadlines and the
correspondence that carries them run in one flow, and each step becomes an entry as it
happens: sent, opened, read, signed and independently timestamped. Nobody writes
the protocol afterwards.
Read against the six situations above: a four-eyes approval is signed by two named people
against a specific document fingerprint under a stated policy version, and the entry
carries all four facts rather than pointing at them. An incident chronology accumulates
while the incident is running, each entry chained to the one before it, so the question
of when the institution knew what has a dated answer instead of a reconstruction. A
pre-contractual assessment is signed at the moment it is completed, which is what makes
it demonstrably earlier than the contract. And a vendor evidence request is answered from
the room rather than from a mailbox: what the vendor stated, on what date, over which
signature.
Exedra Gate is itself an ICT third-party service provider when a financial entity relies
on it, and it is written that way. The contractual terms that reach a provider through
Art. 30 DORA, including the rights of access, inspection and audit for the institution,
its appointed third party and the competent authority, land on Exedra Gate as they land
on any other vendor. The vendor-side facts an institution needs for its own register are
supplied by Exedra Gate about Exedra Gate, dated and under signature, rather than
reconstructed from a sales email.
The signature on every entry carries a timestamp issued under RFC 3161 by an authority that is
not Exedra Gate. That is the whole of the integrity claim, and it is deliberately narrow:
it says the documents are unchanged and existed at the stated moment, and it says nothing
about whether they satisfy a rule.
The evidence pack is the flight recorder.
Nobody thinks about it while the work is going well; then something goes wrong, and it
is the only thing that matters. Each engagement closes into one evidence pack: every
document, identity check, signature and access, in order, each entry fingerprinted and
chained to the one before it. It is handed over rather than assembled, and it reads the
same whichever entity is asked.