# Controls and live evidence As of 2026-11-06T04:55:31.137Z. 11 of 13 controls operating, 2 partly in place, 0 needing attention. ## RS-LED-1 Append-only, hash-chained, signed ledger (Operating) Every recorded check, approval and action is hash-chained, sealed into Ed25519-signed Merkle blocks, and never edited or deleted. Live evidence: Chain re-verified at read: valid. 15,250 entries in 3,838 blocks. Issuer key key_41eb7b6d1b11968a. Frameworks: SOC 2 CC7.2, PI1.4; ISO 27001 A.5.33, A.8.15, A.8.24; ISO 42001 A.6.2.8; EU AI Act Art. 12, Art. 19, Art. 26(6); NIST AI RMF MANAGE 4.1 Check it: https://www.rightshold.com/v1/ledger/verify · https://www.rightshold.com/verify ## RS-LED-2 Public timestamp anchoring (Operating) Block fingerprints are published to the Bitcoin blockchain through OpenTimestamps, so history cannot be quietly rewritten afterward. Live evidence: Anchoring ok; confirmed through block 3,800. Frameworks: SOC 2 PI1.4; ISO 27001 A.5.33, A.8.24 Check it: https://www.rightshold.com/docs/anchors ## RS-LED-3 Independent witness co-signing (finality) (Partly in place) Unaffiliated operators co-sign block heads; entries in witnessed, anchored blocks are final, settled by parties other than the service. Live evidence: Confirmed unaffiliated witnesses: 0 of 2 required. Until the quorum is met, records reach "anchored", not "final". Frameworks: SOC 2 PI1.4; ISO 27001 A.5.33 Check it: https://www.rightshold.com/witnesses ## RS-KEY-1 Signing-key succession by threshold (Partly in place) A signing-key change takes effect only through a sealed plan naming three successor keys, a public challenge window, and two of three successors signing. Live evidence: Rule live: 2 of 3 successors, with a timelocked challenge window. Plan state: none announced. Frameworks: SOC 2 CC6.1; ISO 27001 A.5.17, A.8.24 Check it: https://www.rightshold.com/status ## RS-CHG-1 Recorded releases with automatic rollback (Operating) Every release is recorded on the ledger with its commit; each new build is judged by a smoke battery and rolled back automatically on a confirmed regression. Live evidence: 127 releases recorded in the last 30 days. Current build verdict: pass; 23 builds judged. Frameworks: SOC 2 CC8.1; ISO 27001 A.8.32 Check it: https://www.rightshold.com/transparency/changes ## RS-INC-1 Self-filed incidents (Operating) Failing checks file sealed incident records automatically, with exceptions-only paging, so an unattended system reports its own faults. Live evidence: Sealing ok; storage ok; webhooks ok. Frameworks: SOC 2 CC7.3, CC7.4; ISO 27001 A.5.24, A.5.25, A.5.26 Check it: https://www.rightshold.com/status ## RS-ACC-1 Every operator action is public (Operating) Each use of operator power is sealed on the public ledger as an operator action (operation and a path hash). Delegated read keys can read, never change. Live evidence: 10 operator actions sealed in the last 30 days. Frameworks: SOC 2 CC6.1, CC6.3; ISO 27001 A.5.15, A.8.15 Check it: https://www.rightshold.com/v1/operator-actions ## RS-ABU-1 Scanner tripwires, adaptive limits and proof-of-work (Operating) Scanner probes and wrong operator credentials are recorded by category against hashed networks; flagged networks must solve proof-of-work to register; abusive accounts are quarantined with an appeal path. Live evidence: 21 tripwire events in the last 24 hours (categories and hashed networks only). Frameworks: SOC 2 CC6.6, CC7.2; ISO 27001 A.8.16 Check it: https://www.rightshold.com/security/spec ## RS-MNY-1 Fees in shadow mode behind circuit breakers (Operating) Fees are computed and sealed but never executed until arbitration readiness and an explicit operator decision; per-transaction and daily caps trip an automatic pause. Live evidence: Fee mode: shadow. Circuit breaker: closed. Frameworks: SOC 2 PI1.2; ISO 27001 A.8.32 Check it: https://www.rightshold.com/v1/money/status · https://www.rightshold.com/pricing ## RS-PRV-1 Public records pass anonymity checks before sealing (Operating) Public-facing records stage privately and pass schema, lint, anonymity and drift checks before they seal; public surfaces show aggregates only. Live evidence: Checks: schema, lint, anonymity, drift. Staged now: 0. Frameworks: SOC 2 C1.1, P4.1; ISO 27001 A.5.34, A.8.11 Check it: https://www.rightshold.com/privacy ## RS-OPS-1 Supervision evidence a customer can hand over (Operating) Workspaces record agent actions with durable receipts, evaluate policies on a schedule, route exceptions to human review, send signed alerts to the customer's systems, and issue signed, hash-chained weekly statements a reviewer can verify without an account. Live evidence: Available to every workspace. Live workspaces: 0; signed statements issued: 0; active alert endpoints: 0. Frameworks: EU AI Act Art. 12, Art. 14, Art. 26(5), Art. 26(6); ISO 42001 A.6.2.6, A.6.2.8; NIST AI RMF MANAGE 4.1; SOC 2 CC7.2 Check it: https://www.rightshold.com/operations ## RS-AVL-1 Durable storage and replicated checkpoints (Operating) Records are kept on durable storage; signed checkpoints of the ledger head are replicated beside the database and published daily. Live evidence: Storage ok. Daily snapshot published. Frameworks: SOC 2 A1.2; ISO 27001 A.8.13, A.8.14 Check it: https://www.rightshold.com/v1/ledger/snapshot ## RS-VUL-1 Vulnerability disclosure (Operating) A published security contact and disclosure policy; security changes are recorded and dated. Live evidence: security.txt published; security changes listed. Frameworks: SOC 2 CC7.1; ISO 27001 A.8.8 Check it: https://www.rightshold.com/.well-known/security.txt · https://www.rightshold.com/security/changes ## Gaps - Independent witness quorum: 0 of 2. Two unaffiliated operators confirm and co-sign block heads; records then reach the final rung. - Designated successor keys: none announced. The owner announces a sealed plan naming three successor keys. - Third-party attestation: None held. An independent auditor issues a report. Until then, every control here is evidenced by its live reading, not by an attestation. ## Not claimed - No SOC 2 report, ISO/IEC 27001 or ISO/IEC 42001 certificate, or third-party audit opinion is held or implied. - Framework references show where a control can support a customer's own evidence. They are the service's mapping, not a determination that any requirement is met. - Records prove what was submitted and when, and that it has not changed since. They do not prove that a self-reported action actually happened. - Nothing here is legal advice.