Record
Copy input bytes into a workspace. Originals are not mutated. Each artifact gets a source label, actor, and job identity.
PRODUCT
Deterministic evidentiary software you run on the job.
Blackbox Systems is the receipt, manifest, signature, packet, and verification runtime for digital evidence. You deploy it beside forensic, eDiscovery, incident, archive, and provider-assurance work. You do not subscribe to a tenant.
WHAT SHIPS
Four surfaces. One evidence sequence.
Record, bind, issue, verify. Each state stays independently inspectable after the originating process has ended. The product is the record those four states leave.
Bind
SHA-256 over file bytes. Chained V2 receipts with previous-record linkage. Crash-safe append and torn-tail handling.
Issue
Compile a packet only when scope, limitations, reviews, receipts, and manifests are present. Missing controls keep the packet DRAFT_ONLY or HOLD.
Verify
A reviewer recomputes hashes, checks signatures with public keys, and rejects undeclared ZIP entries without the originating runtime.
OPERATOR CLI
Windows-native. Offline. No login.
The PowerShell module is the operator surface. PowerShell 5.1 or 7. SHA-256 required. SHA-1 and MD5 only when requested. Manifests are ordered. Receipts are append-only NDJSON. State lives on the machine, not in a hosted account.
Initialize-BlackBoxWorkspace
Create the local workspace under the operator machine. No network. No credentials.
Import-BlackBoxArtifact
Copy bytes in. Originals stay untouched.
New-BlackBoxHashManifest
Deterministic ordered SHA-256 manifest over the workspace.
New-BBJob / Add-BBInput
Job object with a case id. Inputs attach to the job, not to a cloud tenant.
Invoke-BBHash / Invoke-BBExport
Hash, then export a packet. Receipts append. They do not rewrite history.
Get-BBReceipt / Invoke-BlackBoxSelfTest
Read the chain. Run the module self-test on the same machine.
ISSUED PACKET
A packet is final only when the controls are present.
If scope, non-authority notice, source index, limitation register, review records, receipts, manifest, or export hash is missing, the runtime loses delivery authority for that packet. The operator holds, revises, voids, or supersedes. The software does not silently ship a DRAFT as a release.
packet_summary.md
What the job claimed to cover and what was actually issued.
non_authority_notice.txt
The packet does not certify truth, decide meaning, or replace professional judgment.
job.json
Job identity, scope, client label, and actor boundary.
artifact_index.csv
Every file that entered the workspace, with hash and source label.
source_index.csv
Where each artifact came from. Filename is not identity.
limitations.csv
Known gaps, WARN and blocking limitations, still visible after export.
review_items.json
Operator review state. Unresolved blocking review kills delivery authority.
manifest + export hash
Declared payload universe and a hash of the issued archive.
IMPLEMENTED NOW
The current product body is source, tests, and executed campaigns.
Chained V2 receipts. Deterministic hashing. Serialized crash-safe append. Detached Ed25519 signatures and public-key verification. Transactional signed journals. Legacy-boundary migration records. Detached release verification over a declared ZIP universe.
Stress evidence
A committed one-million-case receipted assurance campaign. Later campaigns record 18 million successful cases across 72 × 250,000-case receipt sets, and 5 million successful cases across 20 × 250,000-case receipt sets. Split archives and SHA-256 ledgers remain in repository custody.
Still bounded
Default packet compilation is not claimed as on in every path. Signed-journal operational activation, key-provider adapters, rotation runbooks, and enterprise pilot controls remain separate work. Implemented is not default-on.
What the software refuses
It does not certify truth. It does not decide meaning. It does not recommend a legal, accounting, or investigative conclusion. It does not send outbound messages. A successful verifier result means the presented material satisfied the contract being checked.
HOW IT IS SOLD
Deployment, not a seat license in the cloud.
Mediator Solutions LLC is the contracting entity. Access is a scoped deployment: workspace policy, key custody, packet rules, and operator boundary. There is no public self-serve tenant and no sign-up form.
Commercial path
Discuss the handoff you actually run. Forensic lab to counsel. eDiscovery export. Incident package to insurer. Archive to a recipient. Provider-assurance proof. Blackbox sits at the handoff.
Federal path
Unique Entity ID R2KVBJF18MG6 is assigned on SAM.gov. Full SAM registration is not complete. CAGE is not issued. APEX Accelerators engagement is underway.