Provenance that must survive audit, years after the offtake was signed.

A named strategic sector, with clocks and benchmarks in the regulation.

Each entry is a published rule with its primary source. Which regime reaches a given project or investor is a question for the company and its counsel, never for a platform.

• YEARS LATER

  The documentation outlives the deal team. Offtake and royalty agreements, permit conditions, community consent and environmental baselines are re-read by lenders' counsel at each refinancing, by auditors annually, and by authorities on their own schedule. The recurring question is not whether a document exists but which version was in force, on which date, and who had seen it.

The project's chain of record, produced at home.

On a sovereign deployment the project's rooms run on infrastructure the company controls, in the jurisdiction the engagement specifies. Each permit, consent, baseline and contract becomes a signed version with a date as it enters the record; the screening file behind a state investor's cheque is an export, not a scramble; and a Strategic Project dossier or lender request is answered from dated entries rather than assembled from mailboxes. The company's security team approves every update to the platform before it lands.

The perimeter claim is made per configuration: with identity verification, screening and mail in the company's own mode, no document, key or event leaves the perimeter in normal operation; in the connected timestamping postures, the one egress is a SHA-256 fingerprint sent for independent timestamping.

Controls for a file that outlives the deal team.

• REBUILT

  A chain fed by many hands arrives disarmed, and stays provable. Permits, baselines and counterparty reports reach the record from surveyors, communities, agencies and offtakers. Each inbound file is rebuilt with active content removed before a reviewer opens it, and because rebuilding changes the bytes, both fingerprints are recorded in one entry: the exact bytes received and the rebuilt copy. Years later, what a counterparty submitted is still provable, even though nobody ever opened the raw file.

• ADDRESSES

  Sessions stand only where the company says they may. A login from an address the company has not authorised is refused at session establishment, and every refused attempt is itself written to the tamper-evident rail. A project with state counterparties gets a perimeter that produces evidence even when it says no.

• WATERMARKED

  The offtake room is viewed, not handed over. Diligence documents are served through a per-view forensic watermark: who opened the page, at what moment, with an identifier that resolves to one recorded view on the rail. A copy that surfaces later attributes to a specific viewer and moment. It deters and attributes; it does not stop a camera.

• COMPANY KEYS

  Signing can move into the company's custody. Evidence signing can be delegated to an HSM the company runs: the private key then never exists on the platform, and each pack records which key signed it. The consequence travels with the switch: key-management assurance rests with the company, under its own controls, and its auditor is pointed at its HSM.

Stated before anyone asks.

• NOT TRUTH

  A evidence pack proves existence, never truth. An evidence pack establishes that identified documents existed unaltered at a recorded time. It does not establish that an ore body grades as stated, that a consent was freely given, or that a provenance claim is accurate. Those claims stay the company's claims, examined on their merits.

• NO STATUS

  No regulatory status is conferred. Strategic Project recognition, permits, screening clearances and certifications are granted by the authorities that grant them. A better-organised dossier changes the work of applying, not the decision.

• NOT ESG

  No sustainability judgment. The platform records what the company documented and when. It scores nothing, certifies nothing and audits nothing; assurance remains the business of the assurers.