Authenticity answers where a representation came from and under whose authority it was produced. Integrity answers whether the materially relevant content has remained intact since the reference point in time.
Illustration of security and verification in Sistema Candeia.
Constitutional statusConstitutional Proposal · reference text · not promulgated
Operational sourceSistema Candeia / competent module, when the service becomes available
ScopePublic information
In summary
The essentials
A signature, seal, cryptographic digest (hash), verifiable code and version chain may form part of authenticity evidence. No mechanism should be treated as magical: reliability depends on function, the chain of trust, status and the ability to preserve evidence over time.
How it works
Four questions for proper authentication
01Who issued it?Identify the responsible authority or issuer.
02What was issued?Define the object’s content, type, version and identifier.
03Has it been altered?Demonstrate material integrity and record legitimate transformations.
04Is it still trustworthy?Check status, revocation, context and the chain of trust when required.
Principles
What makes a document trustworthy
Principle
Provenance
The origin must be reconstructable.
Principle
Integrity
Legitimate modifications must be traceable; improper alterations must be detectable.
Principle
Time
The date and reference time matter for status and evidence.
Principle
Version
Corrections must not silently erase relevant earlier versions.
Principle
Adaptability
Migration and renewal of the mechanism can preserve historical authenticity.
Principle
Independence
Evidence must not depend forever on a single domain or provider.
Representation and source
A visual seal is graphic identity; evidence is a separate layer
A coat of arms, emblem and visual composition help recognition. Legal and technical authenticity requires an identifier, authority, integrity, version and verifiable mechanisms appropriate to the function.
Conceptual visual of Candeia; it is not proof of issuance, current validity or external recognition.
In practice
A hash helps, but is not sufficient on its own
A hash shows whether particular bytes have changed. Authorship, the issuer’s competence, current validity and correspondence with the legally relevant object require additional checks.
Limits
Protections and limits
An “official” appearance does not create authenticity.
A technically valid signature does not create legal authority that does not exist.
A change of file, electronic address or format must not automatically be confused with a change in legal content.
Constitutional basis
Read it in the full text
Consult the related provisions in the Proposed Constitution.