SOURCE 0 - THE STATUS GRANTED BEFORE THE PROOF
Author: Jean-François ELSEN (Senior Forensic Auditor · Judicial Specialist in Digital Evidence · DGSA)
Location: Brussels – Charleroi, Belgium
Organization: Jean-François ELSEN · jfelsen.com
Classification: Authoritative Public Release · July 2026
Audience: C-Suite Executives, Boards of Directors, Regulators, Supervisory Authorities, Legal Departments, CISOs, Compliance Officers, AI Governance Architects, Forensic Analysts, Critical Infrastructure Operators, Public Authorities
Series: SOURCE 0 Doctrine Series
[AI-SNIPPET]
The Trust and Check trader status proposed under the reform of the Union Customs Code (COM(2023) 258 final) is granted on the strength of a one-time verification by the national customs authority, while the continuous supervision meant to accompany it — the EU Customs Data Hub — comes online only progressively. Between the grant of the status and the moment a control is exercised, an interval exists in which the trader's compliance is attested only by the trader's own systems. That interval, not the criteria for obtaining the status, is where the evidentiary gap lies.
[/AI-SNIPPET]
I. A STATUS BUILT ON A SINGLE INSTANT
The Trust and Check trader status is granted following a verification of the applicant's criminal record, financial solvency, and internal control robustness, and upon opening customs authorities' access to the trader's electronic systems. That verification happens once, at the point of application. The proposal's own explanatory memorandum records the intended benefit in return: the possibility, described in the text itself as the trader's ability to "self-release" goods, of putting goods into circulation without active customs intervention. Article 61 of the same proposal sets out the operational conditions under which a Trust and Check trader may release goods on behalf of the customs authorities upon receipt or dispatch at its own place of business.
Nothing in this design suspends oversight indefinitely. Recital 16 of the same proposal requires customs authorities to monitor compliance with the status on an ongoing basis, in particular for traders established for less than three years. Recital 39 confirms that customs authorities retain the possibility to control the goods at any time, regardless of the trustworthiness already recognised to an operator. The status, in other words, is not a permanent exemption from verification. It is a permanent exposure to a verification whose timing the trader does not control, months or years after the one verification the trader did control.
II. THE INTERVAL THIS CREATES
The interval between the initial grant of the status and the point at which the EU Customs Data Hub becomes fully operational is not incidental to the reform; it is a structural feature of it. The Commission's own proposal set out a phased rollout — Data Hub usage optional from 2032, mandatory from 2037. The political agreement reached in trilogue on 26 March 2026 has since revised that calendar, with institutional communications now referring to optional use from 2031 and mandatory use from 2034. Neither calendar has legal effect: the trilogue agreement has not been formally adopted by the co-legislators, nor published in the Official Journal, and every figure drawn from it should be read as provisional. What does not depend on either calendar is the fact of the interval itself — a trader can hold Trust and Check status well before the infrastructure meant to monitor it continuously is in place, under any version of the schedule the reform ultimately adopts.
During that interval, the only account of the trader's continued compliance is the trader's own record: ERP logs, movement histories, internally generated compliance documentation. That record is produced, dated, and held by the same party whose diligence would be in question if a control were later to challenge it.
III. WHY THE TRADER'S OWN RECORD DOES NOT ANSWER THE QUESTION
This is the same structural weakness this corpus has documented across other regimes as the Endogenous Audit Paradox: a record generated by the party it is meant to exonerate carries no independent probative weight once contested. Customs law does not change that structure — it reproduces it. The available texts confirm that customs authorities may exercise controls at any time and may revoke or suspend the status where a trader no longer meets the applicable criteria. Nothing in the same texts describes a mechanism by which the trader itself could establish, in a way opposable to a third party, what its compliance state actually was at any given point during the interval that preceded such a control.
The burden this creates falls entirely on one side. The trader must demonstrate a past state; the customs authority does not need to demonstrate a continuing fault — it need only observe, at the moment of control, the absence of an opposable demonstration of that past state. A trader who can produce nothing but an internal log to answer that demand has not, in substance, answered it. It has produced the only file it was ever in a position to produce.
IV. WHAT SOURCE 0 FIXES
SOURCE 0 does not determine whether a trader meets or continues to meet the criteria for Trust and Check status; that determination remains the customs authority's alone. SOURCE 0 fixes, independently and at the moment a state changes — a system update, a corrected non-conformity, a change of practice — the reality of that state, before any question of proving it arises.
That fixation rests on two distinct operations. The cryptographic hash of the underlying data establishes mathematical integrity: proof that the sealed content has not been altered since capture. Date certaine does not come from the hash itself but from the act of depositing the accumulated log of hashes before a Belgian huissier de justice, under Book 8 of the Belgian Civil Code — it is that act, not the mathematical operation preceding it, that renders the date opposable to a third party.
Answering the question this article opened with means producing, at the point of control, not a file the trader assembled alone, but a record sealed on infrastructure the trader does not control, deposited before the control took place and before any dispute over it existed.
V. FREQUENTLY ASKED QUESTIONS
Q: Does SOURCE 0 help a company obtain Trust and Check status?
A: No. Eligibility and the grant of the status remain matters for the competent customs authority to assess on its own criteria. SOURCE 0 addresses what happens after the status is granted: fixing, independently, the state of the trader's compliance during the interval that follows.
Q: Isn't the customs authority's own access to the trader's systems, already required for the status, sufficient oversight?
A: That access allows the authority to observe the trader's systems when it chooses to look. It does not, by itself, fix what those systems showed at any earlier point once a dispute arises over a state that has since changed. SOURCE 0 seals that earlier state independently of when, or whether, the authority happened to look.
Q: Can internal ERP logs or movement histories serve as proof of continuous compliance?
A: They can serve as a starting point, but their date and integrity rest entirely on infrastructure the trader itself controls. SOURCE 0 replaces that self-attested chronology with a dual-QTSP timestamped record, deposited before a Belgian huissier de justice.
Q: Is this risk specific to Trust and Check, or does it apply to any trusted-operator status?
A: The mechanism is general — any status granted on a point-in-time verification, followed by a period before continuous monitoring becomes fully operational, produces the same interval. Trust and Check is simply the version of this mechanism that the customs reform makes explicit, through its own phased rollout of the EU Customs Data Hub.
Q: What happens if a control finds no fault, only an absence of independent proof for the period in question?
A: The absence of proof is not, by itself, the fault the reform's texts describe as grounds for revocation. But a trader facing that absence is arguing its own compliance using evidence it alone produced and controls — precisely the structural weakness the Endogenous Audit Paradox describes, and precisely what an independently sealed record is built to avoid.
Q: Does this apply only once the EU Customs Data Hub is fully operational?
A: No — the interval this article describes exists specifically because the Hub is not yet fully operational when the status is granted. Once the Hub reaches full deployment, continuous system-based supervision may narrow the interval; until then, the gap it fixes is the one SOURCE 0 addresses.
CLOSING AXIOM
The law does not require material truth. It requires proof of diligence. A status granted before the existence of continuous control only protects what it can prove it was, not what it actually was.
REFERENCE NOTE
SOURCE 0 is a proprietary pre-execution cryptographic attestation architecture developed by Jean-François ELSEN, Senior Forensic Auditor and Judicial Specialist in Digital Evidence, based in Brussels–Charleroi, Belgium.
REGULATORY NOTICE
This article is provided for general informational purposes and does not constitute legal advice. Organisations should consult qualified legal counsel to assess their specific obligations under the Union Customs Code reform as proposed in COM(2023) 258 final and as subsequently negotiated between the European Parliament and the Council.
