Sanctions Desk gathers and checks the evidence for every sanctions-screening alert and recommends an outcome; a person with the right entitlement approves it. One alert, start to finish · The problem it works on

Replay of recorded runs. Nothing runs live here. Every row below is read from files committed in the repository (eval/runs/), and every signature was checked when this page was built.

Each signature is Ed25519 over the receipt body in receipts.jsonl.gz, checked with the same code as npm run evidence:verify. The receipt key of the Nightshift runtime is pinned in config/default.json: a receipt counts only if it is signed by that key, so it shows both that the receipt was not changed and that this runtime signed it. The build stops if a receipt is signed by another key, if a receipt is missing, does not verify, or names a different model from the trace.

In the full list below, a row without a receipt id is an answer from the local Ollama backup or a call that ended without an answer; its last column says which.

Full list

Check it yourself: clone the repository and run npm run evidence:verify -- eval/runs/heldout-routed-20261023T121140Z.