Product/Assurance

Know what changed.
Know what you relied on.

Check received data against what was published, keep earlier versions, and keep responsibilities clear. Assurance you can inspect, not a promise that every fact is correct.

Four questions about every record.
Commons answers three.

When data arrives from someone else, you want to know where it came from, whether it was changed, and what it said before. Commons can show you each of those. Whether the information is right for your decision stays with you.

Attribution
Who publishes this Store?

Every Store is attributed to its publisher, and each change is signed by an author the Store permits.

Commons shows you
Integrity
Has it been altered?

A content fingerprint lets you confirm the record hasn’t been altered since it was signed.

Commons shows you
History
What did it say before?

Retained versions let you open the earlier record and compare it with the current one.

Commons shows you
Correctness
Is it right for this decision?

A valid signature proves origin, not accuracy. Source quality and fitness for use are still a judgment.

Your call

Shared validation is not
the same as verified facts.

Byte integrity checks concern the data that was published. Schema capabilities add a second question: does this write satisfy the dataset’s rules?

A network can reuse one capability to apply the same collection and validation model across datasets with different formats. That consistency depends on the capability being applied; the storage format doesn’t impose it.

A new fact can change an earlier assessment.

A license is withdrawn or a record is corrected. A subscribed application can use the update to flag work that needs another look.

Commons delivers the change. The application’s own rules decide what happens next.

Record change. “Review needed” comes from the application’s rule.

Return to the record behind the decision.

A report can record the versions it used. When the source changes, reviewers compare against the captured version instead of rebuilding the past.

History is useful before a decision as well as after it. AI workflows can use retained versions to compare earlier and current records, inspect corrections, and review changed evidence, once the application or capability exposes them.

Agree what is kept and for how long. History can’t return a version that was never captured.

Report and history. The consuming workflow records which version it used.

You choose where it lives.
And who can use it.

Know what you control, and where the limits are.

Hosting

Run your own node, add replicas for availability, or use shared hosting. Where a Store lives is your choice; its access rules travel with it.

Store permissions

Read, write, host, and admin rules apply per Store. Record-level rules are in development.

Revocation

Removing access stops future updates. It doesn’t erase copies already delivered.

Still readable offline.
Not always current.

A local copy stays readable when the publisher or connection is down. It holds what already arrived, not changes still on their way.

So every copy can tell you how far behind it might be. Agree with the application owner how old is too old for each task.

Bound the code as well as the data.

The platform decides where each capability part runs and what it can use.

Signed releases

A release is signed by its publisher. Check the publisher and the behavior; a signature doesn’t prove the code is correct.

Enforced runtimes

Schema on every write. Ingestion at the writing location. Materializers only in reading Apps, never in the sidecar.

Sandbox and network limits

Memory and CPU limits. Network access needs a grant for named hosts; private addresses are always refused.

Capacity safeguards

Message acceptance depends on memory and disk capacity. Large-message support isn’t unlimited processing.

Know what arrived. Keep what you used.

Check each change against its publication, keep the versions your decisions rested on, and leave judgment where it belongs.