Trust is a feature, not a footnote
CARM separates what is measured from what is asserted, and makes every step from evidence to certificate independently checkable.
The controls behind every rating
Six mechanisms keep a CARM rating honest, reproducible, and independently verifiable.
- Evidence registryLegal and rights evidence is a ranked registry — authority, evidence type, reference, verification date, and re-verification interval — not a single checkbox. Authority-verified records outrank self-declared ones, and overdue re-verifications are flagged.
- Immutable audit trailAuthoritative catalogue, rating, valuation, evidence, and certificate actions are recorded in an append-only, hash-linked audit trail.
- Certificate lifecycleA certificate starts preliminary and moves through human review. Demo final records are clearly distinguished from production signed PDFs; production cryptographic signing and managed keys remain post-MVP controls.
- Public verificationAnyone holding a certificate reference can check the platform record and current status at a public URL — no account or login required. This does not itself prove that a downloaded file is cryptographically signed.
- Versioned methodologyEvery rating and valuation stores the methodology version and the exact calculation snapshot used, so later methodology releases can never silently change a historical result.
- Bounded AIThe "Explain this rating" assistant only describes already-computed outputs in plain language. It cannot calculate or override a score, invent legal evidence, or make certificate decisions.
Certificate status, at a glance
The public verifier reports the current platform status while exposing only approved public fields.
Preliminary
Requested, not yet reviewed by an analyst.
Final
Reviewed and signed off by a qualified analyst.
Revoked
Withdrawn after issuance; verification reflects this immediately.
Verify a certificate yourself
Every certificate is checkable at a public URL in the form /verify/:reference — no login, no account, and no dependency on trusting the platform's word alone. Ask your counterparty for their certificate reference to try it.
The canonical hash lets a reviewer compare approved record content. Production signed-PDF identity, managed signing keys, and independent trust-chain controls remain explicitly post-MVP.
Reference in, status out
The public record shows approved rating, valuation, methodology, status, and content-hash fields — no sign-in required.
Indicative, not a guarantee
CARM is an indicative credit and investment assessment tool. It is not a guarantee of value, an offer of finance, or financial advice. Always distinguish input data from calculated output, and self-declared evidence from authority-verified evidence.
See the reasoning behind the number
The CARM score and MLT valuation, explained dimension by dimension.