EVIDENCE STORE
Governance starts with facts you can rely on. Kosli's Evidence Store is an append-only, immutable record of every event across your software delivery lifecycle.
Kosli keeps an append-only history of runtime environments,
both on-prem and in the cloud.
Any environment type, any point in time. Kubernetes and ECS clusters, Lambdas, S3 buckets, Docker hosts, physical and virtual servers.
Every runtime workload is recorded cryptographically, so you can see exactly what was running last Tuesday at 14:02.
The foundation of governance is a trusted, central system of record. That's why the base of the stack is an append-only, immutable ledger of evidence.
ATTESTATIONS: claims that an action happened (tests passed, a change was approved) and SNAPSHOTS: observations of the state of an environment.
Every artifact is identified by its cryptographic identity such as git commit or SHA256 checksum, not its name or tag. Evidence is connected via identities or correlation ids so that you can build a chain of custody from commit to production.
The system of record has no update and no delete. A correction is a new fact, and the old one remains. Kosli holds the record outside your infrastructure, so altering history isn’t possible.
Define the fact types your governance needs. Evidence that does not meet its schema is rejected at write time, and evaluated on ingest. Raw material (test output, SBOMs, scan reports) can be attached and fingerprinted in the Evidence Vault.
Examples:
Examples:
Examples:
Examples:
Examples:
Examples:
