- Tenant
- Nebula Mutual
- typed
- Export returned
- EX-2026-0003, verified by the institution
- produced
- Key
- per-tenant key destroyed; records unreadable from that moment
- produced
- Locked objects
- deleted when their retention ends: not recorded yet
- produced
- Last chain head
de1e7e00a1b0… show full hash
de1e7e00a1b0932d3d36359d8e8bd71af7b4d2a3e166fcebafdc1df25eac1b91- produced
- Position
- the last declaration in the chain
- produced
The prototype switches the signed-in role. Only the named role sees a decision's trigger.
Exit and portability
Leave with everything: both export forms, a verifier you can run alone, and provable deletion.
Prototype states
Export now
Both forms: the GovernanceOS schema, and flat JSON and CSV with the embedded dictionary.
Schema set and dictionary
Delivered at onboarding on 2026-05-04, under a perpetual license for your own records. Escrow: offered; not taken up.
Termination runbook
- Return
A full export in both forms.
- Verify
Your team runs the open verifier on the export and confirms in writing.
- Destroy the key
The per-tenant key is destroyed; locked objects are deleted when their retention ends. A deletion attestation is the last declaration in the chain.
Regulator read without us: an examiner key and a self-verifying pack. Reads and exports never stop, for any reason.
Export running: 31,204 of 48,316 records written. You can leave this page; the export finishes on its own and is listed here.
Export EX-2026-0003 is ready
- Records
- 48,316
- Forms
- GovernanceOS schema; flat JSON and CSV with the dictionary
- Export hash
e5a1907cee30… show full hash
e5a1907cee30a3bb155faafe5a9bf08f352b0e0fd2b404a1e8d3b31c83c36082- Chain head
072daf29a5a0… show full hash
072daf29a5a0e4fd8de18bb09045bb7015b2b7b7186c5c7989d134cf6eb15b9f
Verify it
- Run the verifier
Apache 2.0, no account, no network. Download the verifier
- Compare the head
The verifier prints the chain head; it must match the one above.
- Confirm in writing
Your confirmation is the record that lets deletion proceed.
The CISO, as administrator, confirms the verification.
The export stopped at record 31,204. The tenant store stopped answering. Nothing was lost and nothing was deleted. Start the export again; it resumes from record 31,204.
Deletion is the last step of the runbook. It needs a verified export and your written confirmation, and it cannot be undone.
Export EX-2026-0003 verified and confirmed in writing by the CISO.
Only the CISO, as administrator, requests deletion.