Attesto

Proof of Evolution

Nova, IVC, and lifecycle state

Proof of Evolution is the async Attesto 2.0 lane for proving lifecycle state transitions over committed checkpoint metadata. It does not sit in the hot ingest path and does not block receipts.

Overview

Proofstream creates the evidence history first. The Proof of Evolution lane then takes typed checkpoint commitments, policy semantics, incident/gap state, witness quorum evidence, and previous lifecycle state roots and produces a new committed state root for the next epoch.

Nova and IVC

Nova is used as the research direction for incrementally verifiable computation through folding schemes. In Attesto, the practical goal is to prove lifecycle state evolution over evidence commitments, not to put large AI workloads directly inside the ingest path.

State roots and public inputs

{
  "previous_state_root": "sha256-hex",
  "semantic_schema_root": "typed-commitment-hex",
  "checkpoint_root": "typed-commitment-hex",
  "policy_digest": "typed-commitment-hex",
  "incident_state_hash": "typed-commitment-hex",
  "witness_registry_root": "typed-commitment-hex",
  "required_threshold": 2,
  "required_witness_classes_root": "typed-commitment-hex",
  "next_state_root": "sha256-hex"
}

Evolution chain

Each IVC epoch references the previous state root and the checkpoint range it summarizes. A verifier can inspect the evolution chain as a sequence of state transitions over evidence commitments.

Claim boundaries

Current production language is “designed for lifecycle proofing; cryptographic construction pending external review.” Stronger statements about externally reviewed cryptographic security remain unavailable until an external applied-cryptography review is completed and linked from the public trust material.

Current e2e circuit

The release-blocking attesto.lifecycle.e2e.v1 Nova relation proves Attesto-native Poseidon proof objects, policy-bound incident-gap semantics, schema-root binding, boundary-root binding, and a configured 2-of-3 witness-quorum relation using circuit-friendly Schnorr signatures.

The quorum signature message binds the domain separator, semantic schema root, boundary root, stream, checkpoint epoch and boundary, checkpoint root, policy id/version/digest, required threshold, witness classes root, incident state, witness registry root, revocation epoch, and previous state root. This blocks cross-domain, cross-stream, cross-policy, cross-checkpoint, registry/revocation, boundary and schema replay inside the relation.

External JSON/SHA-256/Ed25519 artifacts are deterministically boundary-verified and bound into Nova with full-width Poseidon commitments. The bridge is a first-class ExternalEvidenceBinding object with binding id, source digest, optional source public key, binding commitment, and timestamp. Stronger claims remain unavailable until an external applied-cryptography review covers the exact circuit version, vectors, release evidence, and commit.