QA Evidence Vault

Why a Public Evidence Vault?

“Trust me, I tested it” is the oldest lie in software. Solace Inspector exists to replace that lie with cryptographic truth. Every inspection is sealed, every human approval is recorded, every change is logged. The vault is public because transparency is the only real trust signal.

🟢 Live QA Status

Current QA health of Solace ecosystem products. Updated on every Inspector run.

QA scores are computed from HICCUPPS heuristics (deterministic, reproducible). Belt: 🟢 Green ≥90 • 🟠 Orange ≥75 • 🟡 Yellow ≥60 • ⚪ White <60.

📝 Change Log (Sealed)

Every significant change to Solace products, with QA evidence hash. Each entry is immutable once sealed.

ⓘ Evidence hashes are git commit SHAs for now. When Solace Inspector runs are available, they will be replaced with <code>sha256:...</code> seals from outbox/ reports.

⚖ Compliance Certifications

✅ How to Verify Any Report

Every sealed report can be independently verified. You don’t need to trust us — the math is public.

# Download any report from the evidence API:
curl https://www.solaceagi.com/api/v1/qa-evidence/report-{run_id}.json > report.json

# Verify the SHA-256 seal (Python):
python3 -c "
import json, hashlib
with open('report.json') as f:
    data = json.load(f)
stored_hash = data.pop('evidence_hash')
computed = 'sha256:' + hashlib.sha256(
    json.dumps(data, sort_keys=True, default=str).encode()
).hexdigest()
print('VALID' if computed == stored_hash else 'TAMPERED')
print('Stored: ', stored_hash)
print('Computed:', computed)
"

# Output:
# VALID
# Stored:   sha256:a4f3c8b2e1...
# Computed: sha256:a4f3c8b2e1...  ← match = untampered