TRUSTED FACTORYFLOW
Evidence. Preserve provenance and disclosure boundaries.
Select sources, authorize, close manifests, preserve custody and reconcile delivery.
Select records that need custody.
| Source | Content | Milestone |
|---|---|---|
| Operations | Task/execution/mission links, recovery decisions and permitted scans. | Case closure or investigation request. |
| Change | Diff, approval, recipe/config revision and signature if required. | Change publication/verification. |
| Acceptance | FAT/SAT/UAT, serials, firmware and handover decision. | Go/no-go and handover. |
From sources to manifest and custody.
Approvers check purpose, recipient and source rights; exports contain permitted data only. Manifests list file hashes and references, and LTANS accepts custody under service configuration. Not all telemetry is retained long-term.
Hold, verification and retention end.
Authorized holds block scoped deletion. Before export, check manifests/hashes and any signature/timestamp trust policy; resolve mismatches before delivery. Retention, storage location and disposal follow applicable agreements and policies.
What does a receipt establish?
Trusted Delivery records sending/receipt of the selected package to its intended recipient under configuration. A receipt is not inherently a signature, acceptance decision or proof of physical reality. Mobile-ID–RAR/C06 internal logs are excluded from third-party packages.