Executive Summary
Claim 39 describes a hash-chained ledger of recovery-lifecycle events, including appeal decisions, and an automatic throttle on any detection rule whose findings are overturned too often. Claim 40 addresses a distinct but closely related problem that arises the moment a single appeal decision is recorded: what happens to the - possibly numerous - sealed evidence bundles that were already generated and that included the now-overturned finding, either directly or as part of an aggregated exposure or reporting artifact.
JIL Sovereign's answer is to leave every such sealed bundle completely untouched. When an appeal overturns a finding, the system identifies every previously-generated sealed bundle whose scope covered that finding, and appends a supersession-flag entry to a separate append-only table naming the overturned finding and each affected bundle. Every subsequent read of any sealed bundle checks this table, so a bundle can be permanently immutable and legally current at the same time.
Problem Statement
Sealed evidentiary records derive their value specifically from being immutable and independently verifiable against their original cryptographic seal and timestamp - the same property that makes them court-admissible also means they cannot simply be edited when new facts emerge. But compliance findings are legally provisional until any applicable appeal window closes, and a single finding is frequently included, directly or through aggregation, in numerous downstream artifacts: individual audit bundles, rolled-up exposure estimates, and reports already delivered to counterparties.
A system that "fixes" an overturned finding by mutating or regenerating those artifacts destroys the very immutability that made them reliable evidence in the first place. A system that does nothing about it leaves stale, legally incorrect sealed bundles circulating indefinitely, with no mechanism connecting the appeal outcome back to everything that already relied on the overturned finding.
Why Existing Approaches Are Insufficient
- Document version control: Replaces or versions the document in place - incompatible with a sealed artifact whose evidentiary value depends on its original hash never changing.
- Blockchain-anchored document systems generally: Typically anchor a document's integrity but do not maintain a downstream-fan-out index connecting one underlying fact to every artifact that incorporated it.
- Manual errata notices: Depend on a person remembering to issue and distribute a correction to every affected recipient - not systematically enforced at read time.
Technical Architecture
Bundle-Lineage Index
Each sealed evidence bundle is registered in a bundle-lineage index at creation time, recording the cluster of findings its scope covers. This index makes it possible to answer, for any given finding, "which already-generated bundles included this."
Supersession Table
| Field | Purpose |
|---|---|
overturned_finding_id | The finding that was reversed on appeal |
affected_bundle_ids[] | Every previously-generated sealed bundle whose lineage covered the finding |
appeal_decision_ref | Reference to the appeal-decision event in the Claim 39 recovery ledger |
flagged_at | Timestamp the supersession entry was appended |
Read-Time Evaluation
On any request to fetch a sealed bundle, the system joins against the supersession table. If the requested bundle is flagged, the response includes a superseded annotation and a pointer to the appeal decision, presented alongside the original sealed content - which itself remains byte-for-byte unaltered and independently verifiable against its original seal.
Relationship to Claim 39's Recovery Ledger
The appeal-decision event that triggers a supersession-flag write is itself one of the lifecycle event types already sealed into Claim 39's hash-chained recovery ledger. Claim 40 is the mechanism that fans that single event out to every previously-generated sealed bundle it touches, closing the loop between the ledger of what happened to a finding and the corpus of sealed documents generated along the way that referenced it.
| Claim | What It Governs |
|---|---|
| Claim 39 | The tamper-evident record of lifecycle events, and the automatic throttle on a detection rule whose findings lose too often on appeal. |
| Claim 40 | What happens, downstream, to every already-sealed evidence bundle that incorporated a finding once that finding is overturned. |
Prior Art Differentiation
| Approach | Original Seal Preserved? | Systematic Downstream Fan-Out? | Checked at Every Read? |
|---|---|---|---|
| Document version control systems | No - document replaced | N/A | N/A |
| Generic blockchain-anchored documents | Yes, per document | No fan-out index | Not typically |
| Manual errata / correction notices | Yes | Manual, human-dependent | No systematic enforcement |
| JIL Sovereign Supersession Propagation | Yes, always | Yes, automatic via lineage index | Yes, every read |