All notes
Evidence / 2025-07-21
Chain of custody without theatre
A court and a bank do not ask whether the file looks pretty. They ask who touched it, and when.
A hash of the source, time of receipt, who had access, what was transformed. That is enough to stop the file collapsing on ‘is this even the same file’.
Forwarding through private messengers without a record is a typical loss. One protected intake channel is better.
We do not imitate a television laboratory. We keep a journal that can be given to another party.