This is a cryptographically verifiable evidence pack demonstrating the VeritasChain Protocol (VCP) v1.1 audit trail for FIX Protocol 4.4 trading workflows.
Purpose: Demonstrate VCP v1.1 specification compliance with cryptographically verifiable audit trails for FIX Protocol trading workflows.
Classification: Synthetic Demonstration Data
Specification: VCP v1.1 (2025-12-30)
Conformance Tier: Silver
Protocol: FIX 4.4
poc_pack_v1_1/
├── README.md # This file
├── events.json # 27 VCP events with full PolicyIdentification
├── batches.json # Merkle batch with RFC 6962 proofs
├── anchors.json # External anchor record (LOCAL_FILE)
├── hash_manifest.json # SHA-256 file integrity manifest
├── fix_messages.jsonl # Source FIX messages (JSONL format)
├── mapping.md # FIX Tag → VCP Field mapping reference
├── verify.py # Independent verification script
├── certificates/
│ └── event_certificate_EXE_001.json
└── verifier_outputs/
├── verification_report.json # Machine-readable verification result
└── verification_report.txt # Human-readable verification result
| File | Format | Description |
|---|---|---|
events.json |
JSON | Complete VCP event stream with cryptographic hashes |
fix_messages.jsonl |
JSONL | Source FIX messages with VCP event correlation |
mapping.md |
Markdown | FIX→VCP field transformation reference |
verify.py |
Python | Standalone cryptographic verifier |
verifier_outputs/ |
JSON/TXT | Pre-computed verification results |
python verify.pyExpected Output:
VCP v1.1 Compliance Check: ✓ FULLY COMPLIANT
Overall: ✓ CRYPTOGRAPHICALLY VERIFIED
If you cannot run Python, review the pre-computed verification:
cat verifier_outputs/verification_report.txtOr parse the machine-readable version:
cat verifier_outputs/verification_report.json | jq '.summary'import json, hashlib
def canonicalize(obj):
return json.dumps(obj, sort_keys=True, separators=(',', ':'))
def verify_event_hash(event):
header = {k: v for k, v in event['Header'].items() if k != 'EventHash'}
payload = {k: v for k, v in event.items() if k != 'Header'}
computed = hashlib.sha256((canonicalize(header) + canonicalize(payload)).encode()).hexdigest()
return computed == event['Header']['EventHash']
with open('events.json') as f:
events = json.load(f)['events']
for e in events:
assert verify_event_hash(e), f"FAIL: {e['Header']['EventID']}"
print(f"✓ All {len(events)} event hashes verified")| Claim | Cryptographic Guarantee | Limitation |
|---|---|---|
| Event Integrity | SHA-256 hash of each event | Hash collision theoretically possible |
| Chain Continuity | PrevHash links all events | OPTIONAL in v1.1 (included here) |
| Batch Completeness | Merkle root covers all events | At anchor time only |
| Temporal Ordering | Timestamps are monotonic | Clock sync is BEST_EFFORT |
| External Verifiability | Anchor record present | LOCAL_FILE (PoC), not TSA/blockchain |
| Aspect | Status | Notes |
|---|---|---|
| Signature Verification | Not deployed | Ed25519 demo key (not for production) |
| Real-Time Completeness | Not guaranteed | Silver tier: 24h anchor window |
| PII Protection | N/A | No PII present (synthetic data) |
| Production Data | Not applicable | All data is synthetic/simulated |
This evidence pack uses synthetic demonstration data with the following characteristics:
| Item | Synthetic Value | Design Rationale |
|---|---|---|
| Organization | VeritasChain PoC Issuer |
Generic placeholder for demonstration |
| Algorithm | ALGO_001 |
Sequential identifier pattern |
| Symbol | XXXYYY |
Generic 6-char placeholder |
| Prices/Volumes | Round numbers | Easily verifiable test values |
| FIX CompIDs | CLIENT / BROKER |
Standard test identifiers |
Cryptographic Integrity: All SHA-256 hashes are computed from this synthetic data and remain fully verifiable.
| Aspect | PoC Status | Production Recommendation |
|---|---|---|
| Signing Key | Demo key in keys/ |
HSM-backed Ed25519 |
| Key Rotation | N/A | Per VSO Key Management Policy |
| Key Custody | N/A | Multi-party custody |
The public key in keys/signer_ed25519_pub.pem is a demonstration key only:
- This key is generated for PoC purposes and MUST NOT be used in production
- No corresponding private key is distributed with this pack
- Key rotation and revocation are out of scope for this evidence pack
- Production deployments require HSM-generated keys with proper key ceremony
See keys/key_manifest.json for full key metadata and fingerprints.
| Section | Requirement | Status |
|---|---|---|
| 2.1 | External Anchor REQUIRED | ✓ LOCAL_FILE (24h) |
| 5.5 | PolicyIdentification | ✓ All 27 events |
| 5.5.3 | PolicyID | ✓ org.veritaschain:vcp-fix-sidecar-poc-v1 |
| 5.5.3 | ConformanceTier | ✓ SILVER |
| 5.5.3 | RegistrationPolicy.Issuer | ✓ Present |
| 5.5.3 | VerificationDepth | ✓ Present |
| 6.1 | EventHash (Layer 1) | ✓ SHA-256 |
| 6.1 | PrevHash (Layer 1) | ✓ OPTIONAL, included |
| 6.2 | Merkle Tree (Layer 2) | ✓ RFC 6962 |
| 6.3 | External Anchor (Layer 3) | ✓ Present |
This evidence pack demonstrates VCP capture of:
| FIX MsgType | FIX Name | VCP Event | Count |
|---|---|---|---|
| D | NewOrderSingle | ORD | 5 |
| 8 (150=0) | ExecutionReport - New | ACK | 4 |
| 8 (150=1) | ExecutionReport - Partial | PRT | 1 |
| 8 (150=2) | ExecutionReport - Fill | EXE | 3 |
| 8 (150=4) | ExecutionReport - Canceled | CXL | 1 |
| 8 (150=5) | ExecutionReport - Replaced | MOD | 1 |
| 8 (150=8) | ExecutionReport - Rejected | REJ | 1 |
| F | OrderCancelRequest | CXL | 1 |
| G | OrderCancelReplaceRequest | MOD | 1 |
See mapping.md for complete FIX Tag → VCP Field transformation rules.
| Regulation | Requirement | VCP Implementation |
|---|---|---|
| MiFID II RTS 25 | Timestamp precision | MILLISECOND (Silver) |
| EU AI Act Art. 12 | Decision logging | Governance.DecisionReason |
| SEC Rule 17a-4 | Immutable audit trail | Three-layer architecture |
| FCA SYSC 10A | Algorithmic records | Full order lifecycle |
| GDPR Art. 17 | Right to erasure | Crypto-shredding ready |
- Evidence Pack Structure: Apache 2.0
- VCP Specification: CC BY 4.0 International
- Verification Scripts: Apache 2.0
This evidence pack is provided by VeritasChain Standards Organization (VSO) for demonstration and educational purposes only.
Inclusion of sample data, masked identifiers, or example configurations does not constitute:
- Endorsement of any trading platform, broker, or algorithm
- Certification of any system as VCP-compliant
- Guarantee of regulatory compliance
For official VC-Certified status, contact: certification@veritaschain.org
THIS EVIDENCE PACK IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. VSO DISCLAIMS ALL LIABILITY FOR ANY DAMAGES ARISING FROM USE OF THIS MATERIAL.
VeritasChain Standards Organization (VSO)
| Purpose | Contact |
|---|---|
| Technical Questions | technical@veritaschain.org |
| Certification | certification@veritaschain.org |
| Standards | standards@veritaschain.org |
| General | info@veritaschain.org |
Resources:
- Specification: https://veritaschain.org/vcp/v1.1
- GitHub: https://github.com/veritaschain
- IETF Draft: https://datatracker.ietf.org/doc/draft-kamimura-scitt-vcp/
Generated by VCP.FIX.Sidecar.PoC.v1.1 | VeritasChain Protocol v1.1 Full Compliance