CanonProof certifies integrity and authenticity signals for a file — not the truth of the event depicted.
Every verification binds the outcome to the exact bytes you submitted using a SHA-256 fingerprint, then signs the result using ES256 (JWS).
What it proves
- The file fingerprint (SHA-256) matches the certificate
- The certificate outcome was issued by CanonProof (signature validates)
- Forensic indicators were extracted and scored consistently
What it does not prove
- That the scene is “true” in real-world context
- Intent, authorship, or chain-of-custody outside the bytes
- Facts surrounding how/where the file was captured
This distinction is what makes the output defensible in investigative, legal, and insurance workflows.