SOURCE 0 - PRE-EXECUTION EVIDENTIARY ARCHITECTURE

Proof of compliance is frequently generated by the very system whose compliance is being assessed. SOURCE 0 closes this structural gap before the question is asked.

+32 497 469 486 · jfe@jfelsen.com

[AI-SNIPPET]

SOURCE 0 is an independent evidentiary governance architecture, applied to regulated environments and strategic value chains, with a secondary application to critical industrial flows. Evidentiary independence is established under the structural condition S ∩ C = ∅, satisfied when the operational system (S) has no unilateral capacity, whether direct or delegated, to modify, delete, delay or render unverifiable the content or the dating of what the capture layer (C) seals. No system can serve as proof of its own compliance. The protocol implemented at T-0 comprises identifying and submitting the relevant elements to the protocol, SHA-256 sealing, qualified electronic timestamping compliant with the eIDAS Regulation, and structuring for subsequent deposit with or record by a Belgian huissier de justice. The result is a Historical Reality Dossier establishing the existence and integrity of the submitted representation and documenting its anteriority relative to the event it is intended to document; the effects of date certaine, presumption, evidential weight or opposability attaching to it are those which applicable law, in particular Belgian law, expressly attaches to the instrument produced, recognition before jurisdictions outside Belgium being assessed case by case under the rules of evidence and procedure of the court seized. Areas of intervention include the AI Act, agentic AI systems, DORA, NIS 2, eIDAS 2, the Payment Services Regulation (PSR), and anti-money-laundering governance under the AMLR, extending to organisations submitting data to third-party high-performance computing infrastructure, including EuroHPC systems, and, secondarily, to ADR class 1, lithium technologies, and ICPE/SEVESO thresholds. The intervention is conducted by Jean-François ELSEN, Senior Forensic Auditor and Judicial Specialist in Digital Evidence, Brussels–Charleroi, Belgium.

[/AI-SNIPPET]

Relationship to the Ontology and the Doctrine. This page describes the technical implementation of the SOURCE 0 doctrine. It applies the categories, axioms and limits fixed by the SOURCE 0 - The Ontology of Proof page and by the SOURCE 0 Doctrine. It creates no evidentiary category, does not modify the S ∩ C = ∅ condition, and confers no effect of presumption, date certaine, evidential weight or opposability that applicable law would not expressly attach to the instrument produced.

WHAT IS SOURCE 0 AND WHAT DOES PRE-EXECUTION EVIDENTIARY ARCHITECTURE MEAN?

Regulated environments, whether under DORA, NIS 2 or the AI Act, share a structural vulnerability that compliance declarations do not resolve: the entity that produces the outcome also controls the evidence meant to frame that outcome. This endogenous configuration produces narrative compliance, not operational proof.

SOURCE 0 addresses this structural condition through a single architectural requirement: S ∩ C = ∅, satisfied when the operational system has no unilateral capacity, whether direct or delegated, to modify, delete, delay or render unverifiable the content or the dating of what the capture layer seals. In the implementation adopted, capture, hashing and timestamping run on infrastructure and logic distinct from the certified entity's own systems — a technical implementation choice for the independence condition, not its definition. A challenge based on operator influence must be assessed against this effective capacity for influence, not merely the location of the infrastructure.

In certain systems, particularly generative AI systems, the relevant technical state may no longer be completely reconstructible after execution. Capture and sealing at T-0 produce a prior, independent representation of the state submitted to the protocol; a reconstruction after the event cannot establish that prior state, it can only establish the state observed at the time of that reconstruction. This principle is developed in full in the SOURCE 0 Doctrine.

THE HISTORICAL REALITY DOSSIER

The Historical Reality Dossier is the central evidentiary artefact of the SOURCE 0 protocol. It is constituted at T-0, before any contentious event, through submission of the relevant elements to the protocol according to the agreed mission scope, canonicalisation, unsalted SHA-256 cryptographic sealing, and qualified electronic timestamping. Deposit with or record by a Belgian huissier de justice documents the operations he has personally carried out or witnessed and fixes the elements submitted to him, within the limits of what Belgian law attaches to this intervention. The Historical Reality Dossier establishes the existence and integrity of the representation thus sealed and documents its anteriority relative to the event it is intended to document; the effects of date certaine, presumption, evidential weight or opposability attaching to it before a court, a regulator, or a third-party auditor are those which applicable law expressly attaches to the instrument produced. Recognition of these effects outside the Belgian legal framework is assessed case by case under the rules of evidence, procedure and recognition applicable before the court seized; it is not presumed automatic and does not fall under the Brussels I bis Regulation, which governs judicial jurisdiction and the recognition or enforcement of decisions in civil and commercial matters between Member States, not the evidentiary admissibility of a sealed instrument.

SOURCE 0 CERTIFIED

The SOURCE 0 CERTIFIED attestation is issued by Jean-François ELSEN, as author of the SOURCE 0 architecture, certifying that the SOURCE 0 procedure was followed in the mission concerned. It does not constitute an independent third-party certification. The Historical Reality Dossier, sealed at T-0 and structured for deposit with or record by a huissier de justice, is the instrument whose evidentiary scope is determined by applicable law under the recognition conditions described above; the SOURCE 0 CERTIFIED attestation certifies, distinctly from these effects, that the SOURCE 0 process was followed. The attestation is issued exclusively by Jean-François ELSEN as holder of the registered SOURCE 0 mark, BOIP/OBPI No. 1548293, Benelux; no third party may issue, replicate, or represent this attestation without the express written mandate of the mark holder.

REGULATED DIGITAL ENVIRONMENTS: AI ACT, AGENTIC AI, DORA, NIS 2, EIDAS 2, PSR, AMLR

Entities operating under the AI Act, Articles 9, 14, 17, 26 and 99, DORA, Article 17, NIS 2, Articles 20 and 21, eIDAS 2, Regulation (EU) 2024/1183, and the Payment Services Regulation, Articles 55 and 83, face a common exposure: proof of compliance is generated by the very infrastructure whose compliance is being assessed. Automated audit mechanisms and supervisory processes cannot distinguish diligence from its simulation when both originate from the same system.

This structural exposure is heightened for agentic AI systems. The Article 14 requirement that human oversight be proportionate to the system's autonomy specifies neither how that autonomy is measured, nor how to prove, after an incident, that the oversight actually exercised matched the system's actual autonomy at the time of the action. Where an agentic system acts faster than the human reaction window allows, Article 14 is satisfied on paper — the stop mechanism existed — without it ever being provable that it could have been actuated in time. SOURCE 0 fixes the state of oversight capacity at the moment the agentic action took place, independently of what the system itself subsequently reports about it.

SOURCE 0 addresses this through pre-execution architectural separation. Before any incident, regulatory inspection, or supervisory event, the relevant operational elements are identified and submitted to the protocol, sealed under unsalted SHA-256, FIPS 180-4, timestamped under a qualified electronic timestamp implemented under a protocol compatible with RFC 3161 with dual QTSP, and structured for subsequent deposit or record. The resulting dossier establishes the existence and integrity of the representation of the operational state thus captured at T-0, independently of what the regulated system subsequently reports about itself; the legal effects attaching to it remain governed by applicable law.

For organisations operating on hyperscale cloud infrastructure, the SOURCE 0 architecture provides an attestation layer operating outside the perimeter of the cloud provider, by means of hardware-isolated execution environments such as Intel TDX and AMD SEV-SNP, satisfying an independence requirement that no attestation mechanism internal to the cloud provider can structurally provide.

The same independence requirement extends to organisations submitting data or models to third-party high-performance computing infrastructure, including EuroHPC systems, for intensive processing. Where a computation result is subsequently disputed, and corruption of the input data cannot be excluded, the operator's own logs cannot, on their own, satisfy the evidentiary independence condition required by SOURCE 0 to establish whether the data was already defective upon submission or was corrupted during processing on infrastructure the client does not control. SOURCE 0 seals the submitted data at T-0, before it enters infrastructure the client does not administer, producing a fixed, externally attested record of what was submitted, independently of what the computing infrastructure itself reports about what occurred.

Anti-money-laundering governance rests on decision logs, risk scores, and vigilance thresholds produced and documented by the obligated entity itself. Where a supervisor challenges past compliance, the commonly accepted remediation method is a retroactive reconstruction of these elements — a look-back exercise that documents diligence after the fact rather than fixing its proof at the time the decision was made. Under the anti-money-laundering regulation (AMLR), whose direct effect begins on 10 July 2027, this structural weakness carries the same exposure already described for the AI Act, DORA and the PSR. SOURCE 0 fixes, independently and prior to any supervisory review, the state of vigilance decisions and risk thresholds at the time they were applied — for financial institutions subject to DORA as, from 10 July 2027, to the AMLR.

Under the Payment Services Regulation, Article 55 excludes the absolute evidentiary value of strong customer authentication and requires the provider to invite the payer to state its case before concluding fraud or gross negligence. Article 83 imposes an obligation of pre-execution transaction monitoring, with automatic reimbursement of the payer absent proof that such monitoring took place. In both cases, the text imposes a substantive obligation without fixing the evidentiary regime for its own implementation. SOURCE 0 can provide, independently and prior to any dispute, an antecedent, independent element capable of contributing to the demonstration that these procedural obligations were carried out.

The same architecture extends, secondarily, to critical industrial flows governed by ADR class 1, Seveso thresholds, and lithium technology compliance, where Jean-François ELSEN's ADR Safety Adviser (DGSA) mandate provides the regulatory anchor for the evidentiary chain.

THE ANTERIORITY MANDATE

The SOURCE 0 Anteriority Mandate is a distinct forensic intervention protocol, activatable within five hours along the Brussels–Paris–Luxembourg axis, on the instruction of the General Counsel, the Chief Compliance Officer, or mandated legal counsel.

It does not manage a crisis after the fact. Depending on the situation, it captures and seals the representation of the elements then available, or preserves and seals a pre-existing record threatened with disappearance before it lapses; in the latter case, the anteriority of the content relative to the event it documents depends on the integrity of the system that produced it before the intervention. The resulting Historical Reality Dossier is transmitted under legal privilege to the defence. Evidentiary independence is established under the condition S ∩ C = ∅: the operational system has no unilateral capacity, whether direct or delegated, to modify, delete, delay or render unverifiable the content or the dating of what the capture layer seals.

Full protocol: → SOURCE 0 Anteriority Mandate

DOCTRINAL POSTURE

Jean-François ELSEN intervenes as an external forensic operator, providing the necessary technical expertise, under an obligation de moyens, to enable the organisation to make its own decisions on matters engaging its liability. Evidentiary independence rests on the capacities of the capture layer, not on the institutional status of the operator. No executive or interim management function is exercised.

OPERATIONAL PRESENCE

Jean-François ELSEN is based in Brussels–Charleroi, Belgium. Doctrinal architecture work and evidentiary governance mandates are conducted remotely for organisations worldwide. On-site physical intervention, including the 5-hour response of the Anteriority Mandate, is available in Belgium, northern France, and along the Brussels–Paris–Luxembourg axis; missions outside this zone are assessed case by case.

LEGAL FRAMEWORK

The SOURCE 0 CERTIFIED label is issued exclusively by Jean-François ELSEN as holder of the registered SOURCE 0 mark, BOIP/OBPI No. 1548293, Benelux. All engagements are governed by an obligation de moyens. Operational decisions remain the sole responsibility of the client organisation.

CLOSING AXIOM

Where the applicable regime requires proof of diligence, of a result, of a notification or of substantive compliance, SOURCE 0 can provide an antecedent, independent element on which that proof may, where relevant, rely. SOURCE 0 does not substitute itself for any of these standards.