Role in the pipeline
StørmVault is the evidence plane for Størm Engine. It stores a canonical evidence record set and seals it for chain-of-custody.
Evidence record set includes:
Evidence chain, not a log store.
StørmVault captures decision-grade records with provenance.
Sealing makes records tamper-evident and durable.
Queries operate on indexed views, not mutable evidence.
Canonical evidence contracts.
- Canonical events and decision objects with provenance.
- Feature schema references and model/policy versions.
- Graph deltas, reachability context, and enforcement receipts.
- Sealed records with optional immutable anchoring.
- Configurable retention and compartment boundaries.
How it works
Three steps from artefact capture to audit verification.
Collect artefacts
Ingest decision objects, event envelopes, and provenance pointers.
Seal and attest
Apply seals and optional anchoring for tamper-evidence.
Retrieve and verify
Provide queryable views and verification proofs for audit.
Interfaces
- Inputs: decision objects, model/policy versions, event envelopes, enforcement acknowledgements.
- Outputs: sealed evidence chain, attestations, retrieval proofs.
- Contracts: retention, immutability, and access control boundaries.
Sealed vs queryable
A plain-language immutability boundary for evidence handling.
Sealed
Immutable evidence records with seals, timestamps, and provenance that cannot be altered.
Queryable
Indexed views and exports derived from sealed records without mutating evidence.
Capabilities
Canonical storage, sealed integrity, immutability boundaries, and retention posture.
Evidence-grade record set
Stores the chain from event to enforcement with versioned context and provenance references. So what: decisions are reconstructable.
Tamper-evident integrity
Records are sealed with PQC-aligned signatures and optional immutable anchoring for long-horizon assurance. So what: evidence remains tamper-evident over time.
Trust-domain partitions and retention
Retention windows and trust-domain partitions govern access to sealed records; export and attestation workflows produce evidence bundles without altering evidence. So what: evidence stays controlled across domains and time.
Evidence bundles and extracts
Provides audit bundles and investigation-ready extracts without altering sealed records. So what: investigations do not compromise evidence integrity.