elan1 GOVERN · L2 ATTESTED
Can I hand this over?
L2 Attested: signed records your auditor can check
L2 Attested is elan1 Govern's second assurance level. On top of L1, each proof record is signed with the residency domain's Ed25519 key, anchored with an outside timestamp and packed into an eight-member evidence bundle. A free offline verifier lets an auditor, lender or insurer check the bundle without asking elan1.
Levels are levels of a claim, not separate products or brands. L2 is the same elan1 Govern, with four things added.
- manifest.json
- seals.jsonl
- chain.json
- anchors/
- keys.json
- declarations/
- lexicon/
- VERIFY.txt
01What it adds
Exactly four additions. The write path does not change.
L2 runs on the same Right Path, the same 16-field record and the same packs as L1. It adds four things on top.
- Signing.
Each record's digest is signed with Ed25519, with one key per residency domain. India first: domain 'in'.
- Anchoring.
Records are batched into Merkle roots and anchored to two RFC 3161 timestamp authorities, one of them in India, within 15 minutes. An anchor shows that a record existed, in that form, by that time. We do not run a blockchain.
- Verifier profiles.
A profile binds a regime's clauses to write types, gates and record fields, by name. The first profile covers the MCA audit trail, through the ledger1 pack.
- Evidence as its own line.
The bundle is the second thing we sell.
02Who it’s for
People who must hand evidence to someone who does not trust them.
- The person who has to hand something to someone who does not trust them: a finance controller facing a statutory auditor, or a CA firm.
- The auditor's counterparty: an external auditor, a lender's diligence team, an insurer.
- Software vendors who resell assurance to their own customers.
03How it works
Upgrade, sign, anchor, export, verify.
Choose a step to see where it sits on the diagram. Every step stays on the page; nothing plays on its own.
Step 1 of 5, Upgrade: Signing is switched on for your tenant at a recorded point in the chain. Records before it stay L1.
The bundle
Eight members. One folder that needs nothing from us.
The bundle carries hashes, not payloads, and never key material.
- manifest.jsonThe list of what the bundle holds
- seals.jsonlThe sealed records, one per line: hashes, not payloads
- chain.jsonHow each record links to the one before
- anchors/The two RFC 3161 timestamp tokens per Merkle root
- keys.jsonKeys to check signatures with; never private key material
- declarations/The declarations the writes were checked against
- lexicon/The vocabulary the writes were expressed in
- VERIFY.txtHow to run the offline verifier
The verifier
Free, offline, reproducible.
elan1-verify --bundle <path> --profile <path>No dependencies, no network, a build anyone can reproduce. Results: PASS · FAIL_INTEGRITY · FAIL_PROFILE · INCOMPLETE · UNSUPPORTED · USAGE.
- PASS
- FAIL_INTEGRITY
- FAIL_PROFILE
- INCOMPLETE
- UNSUPPORTED
- USAGE
Illustrative specimen File names from the bundle specification. Illustrative, not a customer bundle.
04What it connects to
Writes go through elan1 Govern, at every level.
L2 sits on the same write path, the same 16 fields and the same packs as L1. Modes do not change with the level: Mode A stays enforced, and Mode B stays attested advisory. Signing a Mode B record does not make it enforced, and its record keeps the mark that the caller made the write, in every export. At L2, the elan1 Govern name goes on the front of every evidence bundle.
In the console
The Govern console already separates what you may say about each write, by write type and channel. Signing at L2 adds to a record; it never changes which sentence applies.
- Enforced means the kernel holds the only credential to the system of record.
- Attested advisory means the caller holds the credential, and the screen lists what you may not say.
- A dash means the route cannot attempt that action at all.
Illustrative specimen. Not customer data. Fictional sandbox data from the console.
05What it costs
From L2, evidence is its own line.
| What | Price · excl. GST | Includes |
|---|---|---|
| L2 Attested | ₹6,00,000 per tenant per year | 15,00,000 governed actions a year included |
| Beyond allowance, L2 Attested | ₹1.20 per governed action | |
| Refusal beyond allowance, L2 Attested | ₹0.48 per refusal | 40% of ₹1.20 |
| Evidence bundle beyond allowance | ₹2,500 per bundle | From L2: the eight-member signed bundle |
| Verifier profile | ₹3,00,000 per regime per year | From L2: offline verification profile for one regulatory regime |
| Counterparty verification seat | ₹45,000 per seat per year | For an auditor, lender or insurer who checks your bundles |
| Refusal, at any level | 40% of one governed action | Within the allowance, a refusal uses 0.4 of an included governed action; beyond it, it is billed at 40% of your level's rate |
All prices are exclusive of GST. Prices are current list prices; GST is added at the applicable rate on the invoice.
From L2, evidence appears as its own line on the invoice. The offline verifier is free. Your own users are never priced per seat, and there is no outcome pricing.
All prices are exclusive of GST. GST is added at the applicable rate on the invoice.
06Status
Available now.
L2 Attested is available: signing, anchoring, the evidence bundle and the free offline verifier.
- SigningEd25519 signatures, one key per residency domain.Available
- AnchoringMerkle roots anchored to two RFC 3161 timestamp authorities within 15 minutes.Available
- VerifierThe free offline verifier, runnable on an air-gapped machine.Available
- ProfilesVerifier profiles, starting with the MCA audit trail through the ledger1 pack.Available
Available now. Future improvements are listed, in order and without dates, on What’s next.
07What it does not do
The edges of the L2 claim.
Signing and anchoring make a record checkable by someone who does not trust us. They do not say more than that.
- It does not prove a transaction was genuine, or that the decision was right.
- It does not sign your history. Records written before the upgrade stay L1.
- It does not turn Mode B into enforcement.
- It does not put your business data in the bundle. The bundle carries hashes, not payloads, and never key material.
- It does not mean a regulator has accepted anything, and it does not make you compliant. Your auditor still decides what to rely on.
08FAQ
Eight direct answers about L2.
Eight members in one folder: a manifest, the sealed records, the chain links, two RFC 3161 timestamp tokens per Merkle root, the public keys to check signatures with, the declarations and the lexicon the writes used, and instructions for the offline verifier. It carries hashes, not payloads, and never private key material.
Yes, from L2. Your auditor runs the free offline verifier on their own machine, with no network and no account with us, and checks the signatures, the timestamps and the chain.
L2 sits on the same write path and the same 16-field record as L1, and adds four things: an Ed25519 signature from the residency domain's key, anchoring to two RFC 3161 timestamp authorities, an eight-member evidence bundle and a free offline verifier. At L1 the record is tamper-evident to you; from L2 someone else can check it without us.
The L2 Attested platform floor is ₹6,00,000 per tenant per year, with 15,00,000 governed actions a year included; actions beyond that cost ₹1.20 each. Evidence bundles beyond the allowance are ₹2,500 each. A refusal uses 0.4 of an included action, or costs ₹0.48 beyond the allowance. All prices are exclusive of GST.
No. Records are signed and anchored with two independent timestamp authorities. We do not run a blockchain.
Two, one of them based in India. We name them to customers under contract.
They stay L1 and are labelled L1 for good. We say a tenant was upgraded to L2, never that its past records were signed.
No product does that on its own. A verifier profile shows which clauses a bundle was checked against, and what it does not cover.
Next steps
One write path, four layers
Work and Decide propose. Govern and Run assure. Only Govern allows.
// elan1 GOVERN · L2
A signed receipt you can hand to your auditor.
L2 Attested is available now. Talk to us about verifier profiles, the evidence bundle, or a design-partner place.