How it earns trust
Three layers of evidence
Multi-pass overwrite
Repeatedly clobber key material, not once
one pass can leave residual traces
zeroize, not fill(0)
Use zeroize so the compiler can't optimize the write away
fill(0) can be silently dropped
Receipts per pass
Each pass records nonzero byte count + fingerprint
evidence chain, not a claim
Overwrite sequence
Overwrite
Five passes. Each pass measures the remaining nonzero bytes before clobbering again.
pass 1
measure & overwrite key bytes
1024 → 0
pass 2
measure & overwrite again
1024 → 0
pass 3
measure & overwrite again
1024 → 0
pass 4
measure & overwrite again
1024 → 0
pass 5
final measure & overwrite
1024 → 0
Result
Result
5 / 5
all passes recorded — evidence chain intact
pass 1–5 · each measured 1024 nonzero bytes, then overwrote to 0
sha256 of each pass recorded to ledger
sha256 of each pass recorded to ledger
no pass left residual nonzero bytes
independent re-read after final pass confirms 0
independent re-read after final pass confirms 0
Honest scope: this is an evidence chain, not a mathematical proof of "undecryptable".