[ PROOFECONOMY ]™GlossaryOriginSpecsAttested Adversarial Proof
An Attested Adversarial Proof is a record that a specific adversarial action was run against a system under test, with its outcome, signed at capture by a witness that is not the system being tested. It turns an attack result into evidence a third party can check, rather than a finding the tester reports.
What it means
An attack result on its own is a claim: the tester says the technique ran and says what happened. An Attested Adversarial Proof binds that result to a signature made at the moment of capture by a party outside the system under test.
What it contains
- The action. The exact technique or payload, identified by hash.
- The target. The system under test and its configuration at run time.
- The outcome. What the target and the control did, including “did not run” and “no telemetry”.
- The attestation. A signature from an independent witness, made at capture, not after the fact.
How it differs from a validation finding
Adversarial exposure validation (AEV) tools produce findings for the buyer: screenshots, logs and reports kept in the buyer’s environment. An Attested Adversarial Proof is built to leave that environment and still be checked. The witness signature, not the tester’s word, is what makes it evidence.
A finding says what the tester saw. An attested proof shows who saw it, and when.