I’ve been working on something for a while that I think is pretty cool and I want to start talking about it soon. Here’s the elevator pitch tagline:
It’s a platform for creating dynamic procedures, processes, and actions that are (by construction) attested, evidenced, transparent, and trustworthy
Under the hood, this platform will be powered by a combination of remote attestation, behavioural evidence, and various policy engines depending on the use case
To my knowledge, this is the first time a platform like this has become feasible, and the standards are so new that some are still drafts
One of the more obvious questions you might have is “why do you need to build this?” The has a simple answer as well as an interesting one
The simple answer is that if you don’t have something like this, you pay a near exponential cost to automate anything in a regulated environment
Companies (and humans, computers, systems,…), no matter how complex, can only really do one thing at a time. So the overhead around “doing one thing” becomes very important, and so does changing the definition of what “one thing” is, and so does understanding *what* that “one thing” is
In a regulated industry, you have two other things that become vitally important: fulfilling obligations, showing your work, and having it independently verified
(Digging deeper into that would be an entire series of articles on its own. I’ll refrain from now but would like to cover more later)
