Reference deployment · Data Fidelity Register

Apparat’s disclosure register

A public, machine-readable record of verified facts about Apparat — each drawn from a public source, sealed with SHA-256, and anchored in a public transparency log. It is also the reference deployment of the Data Fidelity Register (DFR) format.

73 entries  ·  sealed with SHA-256  ·  anchored in Sigstore Rekor
The current release commitment and Rekor index are in release.json.

About this register

This register records verified facts about Apparat itself: its legal entity (Der Apparat, a French SASU), its architecture, its data policies, and the EU AI Act framework it is built for. Every fact is drawn from a public source — the INPI and INSEE company registries, the EU AI Act text, and Apparat’s own published pages.

How it works

Apparat extracts facts from publicly available documents using a large language model. Each candidate fact is independently reviewed by a second model in a separate audit pass before it is accepted. Every accepted fact is stored as an entry of six fields — context, label, source URL, time period, unit, and value — kept with enough verbatim context to find the claim in its source.

Each entry carries a cryptographic seal: SHA-256 over the RFC 8785 canonicalisation of the six fields. The seal is permanent and tamper-evident. The entry seals are combined into a single release commitment, a Merkle root computed per RFC 6962. Each release’s digest is signed with an ECDSA P-256 key held in a hardware-backed key management service and anchored with a timestamp in the public Sigstore Rekor transparency log. Every release chains to its predecessor, so additions never restate history; prior releases remain retrievable under /releases/.

Apparat runs this register on itself as a working example of what it builds for its clients. The format and its reference verifier are open, so anyone can inspect how a Data Fidelity Register is structured and verified.

Files

Open source

The reference verifier for the Data Fidelity Register format is open and MIT-licensed. It independently checks each entry seal and the RFC 6962 release commitment: github.com/data-fidelity-register/verifier. The specification itself is open under CC BY 4.0: github.com/data-fidelity-register/spec.

Apparat guarantees the fidelity of this record to its sources: each entry reflects the document it cites. Apparat does not audit the truth of the source documents themselves.