Externally verifiable records for credit adverse actions.

This offline page shows how Notary Cloud records an automated decision a deployer's own system already made, as an ECDSA P-256 signed, append-only, tamper-evident record. It does not decide, score, judge fairness, or write any notice.

Scenario: fictional lender NewCo Lending uses ModelX v2.3 and records a synthetic adverse-action decision. A production Notary Cloud verifier uses the same client-side P-256 verification pattern against a public key under /.well-known/notary-keys/. This offline appendix embeds the sample key so it can verify without a network call. This demo is pre-revenue, solo-built, and sample-only.

No real PII Records decisions only Web Crypto verify

Part A

The signed decision record.

principal_reasons is the specific reason set the lender must disclose under ECOA / Regulation B. input_hash, model_version, and policy_version let an examiner later test whether those reasons match what the model scored.

Go to appendix

SAMPLE / SYNTHETIC DATA - no real applicantsSAMPLE DATA - no real applicants

Public key

Production verifier key location: /.well-known/notary-keys/nc_demo_ec_1.pem. This offline demo embeds the same sample public key below so it can verify without a network call.

Part B

In-browser verifier.

This signature was checked in your browser against the embedded demo key. In production, the public key is served separately from the record. Nothing here trusts NewCo's systems or Notary Cloud's servers.

CHECKING Client-side ECDSA P-256 verification is running.

Demonstration is idle. The verifier is checking the original signed record.

prf_demo_aa_0001 signature remains fixed

Canonicalization

Remove signature, sort keys lexicographically, serialize as JSON, then verify the UTF-8 bytes.

Audit report appendix

Appendix A: Externally Verifiable Decision Records

Under rules already in force, a creditor must give specific and accurate reasons for an adverse action even when a complex model produced the outcome, and lack of model understanding is not a defense (CFPB Circular 2022-03). The sample records below were captured outside the deciding system and signed with an independent key. Any reviewer can verify them without trusting the deciding system or the auditor.

sample appendix

SAMPLE / SYNTHETIC DATA - no real applicantsSAMPLE DATA - no real applicants

applicant_ref	decision	principal_reasons	model_version	recorded_at	verify

Method: ECDSA P-256, signature verified here against the embedded demo public key. Production verifiers use a public key served separately from the record. Append-only storage, optional RFC 3161 timestamp. The record is tamper-evident and does not assert absolute immutability.