Trust & Transparency

Billing guarantee

Billing activates only after a verified ReadyEvent lands on the control plane. If the model, adapter, or GPU session never reaches Ready, no billing row is created — the charge is zero, and you receive a zero-line receipt confirming it. Every failure path (all 11 frozen failure_reason values) routes through the same no-charge decision in processFailureEvent.

This claim is backed by the Gate-4 evidence binder (billing state-machine test report). Binder link available at /docs/evidence/gate-4/billing-state-machine once Gate-4 is confirmed closed by captain.

Receipt verification

Every receipt is Ed25519-signed by the Gpodz trust keypair. You can verify any receipt without trusting Gpodz’s servers:

1. Copy the receipt JSON from your billing dashboard.
2. Paste it at /trust/verify — the page loads the public key client-side, no further network request.
3. The page checks the Ed25519 signature against the archived public key. A green tick means the receipt is authentic and unmodified. A red cross means the signature is invalid — contact trust@gpodz.com.

Public keys archived at /trust/keys.json. Historical keys are retained permanently so receipts from any billing period remain verifiable.

Receipt-key custody

Ed25519 signing keys are treated as legal assets. Each version is archived so you can verify receipts from any past billing period.

Custodian

PLACEHOLDER — Gpodz trust officer (name pending LEGAL-4 captain ruling)

Rotation cadence

90-day rotation (TBD — pending counsel approval per LEGAL-4). Each rotation is counter-signed with the prior key.

Key archive

/trust/keys.json — versioned history with counter-sign chain.

Gate 0–4 evidence binder

Gpodz publishes a structured evidence binder covering the five launch gates (Gate 0 through Gate 4). Each gate produces signed artifacts — test reports, contract sign-offs, and infrastructure proofs — that back the billing guarantee above.

Full index at docs/evidence/INDEX.md once published (Sprint 009 Gate-4 close). Key artifact: Gate-4 failure-no-charge.test.ts covers all 11 frozen failure_reason values and asserts zero billing_activations rows per failure path (LEGAL-6 / FND-42).

Counsel-pass status

Gpodz is currently in active counsel review of all customer-facing contracts and compliance items (LEGAL-1 through LEGAL-9).

Operator-level detail at /admin/counsel (operator login required). Completed items are listed at /trust/verify in the transparency appendix once counsel signs off.