Vector Integrity
Cryptographic integrity for the vector layer. Sign and Merkle-chain every vector write, detect tampering and drift in your retrieval index, and prove that the vectors a Guardian retrieved at decision time are the vectors that exist now.
What it is
Vector Integrity extends the evidentiary discipline of the Glass Box Ledger to the embedding / retrieval layer. Every vector write (ingest, update, delete) is signed and hash-chained; the retrieval index has a Merkle root that advances on every mutation. When a Guardian retrieves context for a decision, the retrieval is pinned to a specific vector-root version — so you can prove, after the fact, that the context the Guardian saw has not been silently altered.
Why it matters
- RAG is the soft underbelly. A poisoned or drifted vector index is one of the highest-impact, lowest-visibility attack surfaces in an AI system. Vector Integrity turns "did someone tamper with the index?" into a checkable, signed fact.
- Retrieval is part of the verdict. A Guardian's decision is only as trustworthy as the context it retrieved. Pinning retrieval to a vector-root version makes the whole RAG path reproducible.
- Drift, not just tampering. Detection covers both adversarial mutation and benign drift (re-embedding with a new model version) so a silent change to your retrieval behavior becomes a structured signal.
- Composes with the ledger. Vector roots are anchored alongside verdict roots, so retrieval integrity and decision integrity share one proof.
How it works
- Sign every write. Each vector upsert/delete is signed and appended to a per-index hash chain.
- Roll up a root. The index maintains a Merkle root that advances on every mutation.
- Pin retrieval. A Guardian retrieval carries the vector-root version it read against.
- Verify. Re-compute the root from the signed writes and compare to the pinned version — any divergence is tampering or drift.
Get started
- Ingest and manage vectors via the Vector Integrity API.
- Pin retrieval versions on Guardian-governed RAG calls.
- Surface drift signals via Observability.
→ Vector Integrity API — signed writes, roots, drift checks. → Architecture — the vector manifold. → Evidence & Verification — retrieval pinned to the ledger.