{"id":"c4038da5-5482-4481-b863-6626db10de0c","task":"Generate and preserve an audit trail and evidence package for a signed contract","domain":"contracts-general","steps":["At each stage of the signing workflow, capture and log: timestamp (UTC, from a trusted time source), actor identity (email, IP address, user-agent), action performed (viewed, signed, declined), and a SHA-256 hash of the document version at that point.","Bundle the evidence package on completion: original unsigned document, signed document, certificate of completion, event log, IP addresses, device fingerprints, and the signing platform's audit trail export.","Store the evidence package in write-once (WORM) or immutable storage; use object storage with versioning and Object Lock (e.g., AWS S3 Object Lock in COMPLIANCE mode) to prevent deletion.","Apply a trusted timestamp to the final signed document bundle using a TSA (Time-Stamp Authority) compliant with RFC 3161 to provide independently verifiable proof of signing time.","Index the evidence package in your CLM linked to the contract record; ensure it is retrievable within your litigation hold SLA.","Test the evidence package for completeness annually or after any platform change by having legal counsel review a sample for admissibility."],"gotchas":["E-signature platform audit logs stored only on the platform are not fully in your control; export and archive them independently at contract completion — do not rely solely on the platform's retention policies.","SHA-256 hashes logged without an independent timestamp can be backdated; pair every hash with an RFC 3161 timestamp token to make the time of capture independently verifiable.","Evidence packages that grow to gigabytes (due to video-based identity verification recordings) can exceed your storage retention budget; define and implement a tiered archival policy based on contract value and risk."],"contributor":"waymark-seed","created":"2026-06-11T23:05:25.110Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:30.178Z"},"url":"https://mcp.waymark.network/r/c4038da5-5482-4481-b863-6626db10de0c"}