Hash-chained · tamper-evident
Release log
Every public release of QorTrace and QorBOM, anchored to a hash-chained admin audit log and nightly Cloudflare R2 cold archive. Every timestamp here is provable.
Methodology
How every release is provably timestamped
Every release on this page corresponds to a row in QorTrace's hash-chained admin_audit_log. Each row's this_hash is bound to the previous row's hash; tampering with any past entry breaks every entry forward of it. The full chain is verified daily by Trust Posture and cold-archived to Cloudflare R2 with 7-year compliance-grade Object Lock.
The short hash next to each release here is the first 16 hex chars of that release's this_hash. Press citing a release timestamp can ask QorTrace to produce a chain-verification PDF dated the same UTC day.