What is a self-attested log?

A self-attested log is a record whose integrity can be shown only by the organisation relying on it, or by someone acting for it. If the organisation says the log was not changed, there is nothing outside its control to confirm or contradict that. The opposite is an independently checkable record: one for which a person with no access to the holder's systems, and no need to trust the holder, can detect any later alteration, deletion or back-dating using a published method, such as a fingerprint chain timestamped outside the organisation. The terms come from the Independent Check Rule (ICR-1) published by sebbi.pro, which proposes that self-attested records should carry no legal presumption of integrity.

How it works

1. Ask whether a fingerprint of the log is held or timestamped by someone the organisation does not control.
2. Ask whether an outsider could check the log against it without the organisation's systems or staff.
3. Ask whether a deleted entry would leave a gap an outsider could detect.
4. Three yes answers: independently checkable. Otherwise: self-attested.