Governance
Who may change this index, and a public record of every change. The record is a hash chain: each entry seals the one before it, so a rewritten history no longer matches the heads people kept.
Level
Umbodi alone — At this level the index is run by Umbodi alone; nothing is logged at this level except a change of level.
Head of the log
Keep a copy: if a later version of this log does not contain it, the log was rewritten.
No entry yet, so there is no head to keep.
Partner Approvers and their keys
No Approver has a role at this level.
The log
No entry yet.
Every entry and the Approvers' public keys, as data: governance.json · keys.json
Verify it yourself
This runs in your browser, not on our servers: it rebuilds the chain from the first entry and checks every signature against the published keys.
The honest limits
A partner signature cannot be forged by Umbodi. The check above rebuilds the chain from the first entry, verifies the signature of every signed entry and checks the published keys. A change made without a partner signature is shown as “Alone”; the check does not test whether the level allowed it.
The code is operated by Umbodi. Code deployed to skip these checks would not be prevented — it would be detected: data without a valid signature, or heads that differ from the copies the partner keeps.
Lowering the level is allowed, never silent: it is logged, mailed to the partner at once, and printed here.
Deleting a company from the roster is not governed by this log.