ASARS v0.1

Portable receipts for hardware-attested system events

ASARS defines the public receipt format for kernel observations, policy verdicts, chain provenance, and hardware attestation metadata.

[ VIEW GITHUB SPEC ][ REQUEST ASARS PROOF BUNDLE ]

What ASARS defines

• Event receipt format
• Attestation metadata
• Chain provenance
• Verification fields

Why it exists

Auditors, insurers, and operators need portable evidence that does not depend on a vendor dashboard.

What it is not

• Not a certification
• Not a legal standard
• Not an agency endorsement
• Not a disclosure of proprietary enforcement internals

Example receipt

{
  "asars_version": "0.1",
  "receipt_id": "0x8f2a4c19...c19d",
  "event": {
    "type": "network.egress",
    "verdict": "refused",
    "bound_manifest": "mission-01"
  },
  "attestation": {
    "tpm_quote": "verified",
    "ak_fingerprint": "ab12...ef90"
  },
  "chain": {
    "prev_hash": "0x71a0...4d2c",
    "chain_index": 214867
  }
}

Sanitized sample. Implementation internals are not disclosed.

Portable evidence beats vendor dashboards

[ VIEW GITHUB SPEC ][ REQUEST PROOF BUNDLE ]