Legal evidence architecture
Provenance travels with the file. Custody still happens in the world.
| Inside a UD | Outside the UD |
|---|---|
| Revision IDs, parents, changed blocks and timestamps | Whether the named person actually performed an action |
| Exact-byte hashes and signature evidence | Physical possession, access controls and handling procedure |
| Declared source, custodian and transfer events | Independent corroboration, testimony and institutional records |
| Offline verification of a sealed state | Legal conclusions, relevance, authenticity rulings and admissibility |
No secret tracking: BrowserCarrier makes zero automatic network requests. A transfer event exists only when a participant or authorized system deliberately records it.
External chain-of-custody support is a workflow/commensal layer, not a reason to mutate the UD core.