What it proves
Three mechanisms, one guarantee.
loomseal.com · What it proves
Three mechanisms, one guarantee.
loomseal.com · What it proves
What a verified bundle means
Three mechanisms, one guarantee: the set is whole, or the break has a name.
Signed
The producer holding the signing key assembled these exact claims. Flip one byte anywhere and the signature fails, loudly, with the break named.
Chained
The claims sit in an append-only chain that has not been reordered, rewritten, or trimmed. Anchored history cannot be manufactured after the fact.
Anchored
Chain heads are fixed in time outside the producer's reach, and every artifact you were handed matches its recorded digest: the page as it stood, the run as it happened.
The boundary is stated just as plainly, because proof that overclaims is only marketing. A chain fixes the record, not the character of the recorder. It proves nothing was removed after it was written. It cannot prove that everything which happened was written down, because capture is a property of the producer and not of the format. What verification cannot prove sits in the spec next to what it can.
Proving that nothing was left out is a different job, and a companion profile, LoomSpan, does it on the same chains and the same verifier: continuous signed counts that turn a silent gap into a visible one. And because a format that says do not take our word for it cannot honestly ship a single checker, there are two verifiers kept honest against each other. The worked examples show both halves at real stakes.
Signed. Chained. Anchored.