Record Integrity

How NNWI.ai protects record integrity.

NNWI.ai uses cryptographic fingerprints — SHA-256 hashes — and an append-only governance model to help agencies verify that authorized records have not been silently changed. This page explains what that means in plain English: what a fingerprint is, where it fits in the governance loop, and how a reviewer checks one.

Scope & Honest Limits A SHA-256 fingerprint helps verify that a record's content has not changed since it was authorized. It does not by itself prove who created a record or that the record's contents are accurate — that is the role of the human review and authorization trail described in How It Works. NNWI.ai is not a public blockchain and does not issue tokens.

Plain-English Summary

A digital fingerprint for every authorized record.

Every governed record created through NNWI.ai can receive a cryptographic fingerprint called a SHA-256 hash. The fingerprint does not contain the record, and it does not reveal private information. It is a short, fixed-length code computed from the record's exact content.

Its job is simple: it lets anyone with the authorized record check, later, whether that record still matches what was originally authorized. If even one character of the record changes, the fingerprint no longer matches — and the change is visible.

Think of a SHA-256 hash as a digital fingerprint. The fingerprint does not contain the record itself, but it can be used later to check whether the record is still the same.

The Building Block

What is SHA-256?

SHA-256 is a widely used, openly published cryptographic hash function — a standard tool, not something NNWI.ai invented. It has a few properties that make it useful for record integrity:

Any input, fixed output

It accepts digital input of any size — a sentence or a full meeting record — and always produces a 64-character fingerprint.

Same input, same fingerprint

The same record always produces the same hash. That repeatability is what makes later verification possible.

Small change, different fingerprint

Changing even a single character produces a completely different hash, so alterations become visible.

One-way by design

The hash cannot practically be reversed to reconstruct the original input. The fingerprint reveals nothing readable about the record.

Standard and independent

SHA-256 tools are built into common operating systems and programming languages. A reviewer does not need NNWI.ai software to compute one.

Tamper-evident, not tamper-proof

A fingerprint does not prevent change — it makes change detectable. Detection plus an append-only history is what protects the record.

Input
Meeting approved by Coordinator on 2026-07-05
SHA-256 fingerprint
6ecd21107313e2a38baea20e304c0403ba964cdda03ca3ab1db3c2de2dba19ae
Input — one character changed
Meeting approved by Coordinator on 2026-07-06
SHA-256 fingerprint
a40bb8e2ed624e8a3117f1f51783617511be8684c064324660dd683510767530
One character changed — the date — and every part of the fingerprint changed.

These are the real SHA-256 values of the two sentences above, computed over the UTF-8 text with no trailing newline. You can reproduce them with any standard SHA-256 tool.

Inside the Governance Loop

Where the fingerprint fits.

Every record in NNWI.ai's pilot passes through the same five-step governance loop described on How It Works — Capture, Structure, Review, Authorize, Preserve. AI can assist with transcription and drafting, on hardware NNWI controls — but a record does not become authoritative until a named human reviews and authorizes it. The fingerprint enters the picture at authorization.

01
Capture
Raw Source
The meeting is captured on NNWI hardware; the recording and transcript are saved to the agency's governed folder and preserved exactly as created.
02
Structure
Controlled Intake
The transcript is normalized into a draft record — summary, decisions, action items. The draft is candidate-only, not authoritative.
03
Review
Human-Supervised
A named human reviewer checks the draft for accuracy, sensitivity, and completeness before it can advance. No AI output self-authorizes.
04
Authorize
Fingerprint Generated
The record is explicitly authorized; reviewer identity, timestamp, and applicable reason codes are logged at defined review transitions. The authorized record receives its SHA-256 fingerprint at this point — the fingerprint captures the record exactly as it was approved.
05
Preserve
Append-Only
The record and its fingerprint are held in the audit log. Records are superseded, never deleted — a later correction creates a new governed event that references the earlier one, and the history remains reviewable.
Verification

How a reviewer checks a record.

Verification does not require trusting NNWI.ai's software. It works by comparison, using any standard SHA-256 tool:

01
Provide
Record + Stored Hash
NNWI.ai provides the authorized record and the fingerprint that was stored when the record was authorized.
02
Recompute
Independent Tool
The reviewer runs the same record through a standard SHA-256 tool of their own choosing — built into common operating systems, no NNWI.ai software required.
03
Match
Fingerprints Agree
If the newly computed fingerprint matches the stored one, the reviewer has strong cryptographic evidence that the record's content has not changed since it was authorized.
04
Mismatch
Review Triggered
If the fingerprints do not match, something in the record changed after authorization — and the record must be reviewed to find out what and why.

The hash itself does not contain readable information, and it is not decrypted. Verification works by comparison.

Append-Only Governance

Superseded, not silently overwritten.

Fingerprints answer "did this record change?" The append-only governance model answers the follow-up: "what happens when a record legitimately needs to change?" When a record needs to be corrected, updated, or replaced, the earlier record is not silently overwritten. A new governed event supersedes the prior version while preserving the history.

Typical Tools
NNWI.ai Governed Approach
Corrections
Edits silently overwrite the original
A correction is a new governed event that supersedes the prior version — visibly
Original Version
The old version may disappear entirely
The original authorized record remains preserved, marked as superseded
Lineage
Hard to tell which version replaced which, or why
The new event references the earlier one, so the chain of versions is explicit
Reconstruction
Change history must be reconstructed after the fact, if it can be at all
The history remains reviewable — records are superseded, never deleted
Blockchain Comparison

Similar integrity principles. Not a public blockchain.

NNWI.ai uses integrity concepts also found in blockchain systems — cryptographic hashing and chained verification. However, NNWI.ai is not a public blockchain, does not issue tokens, and does not require a public distributed ledger. The goal is practical public-safety governance: records that are easier to verify, review, and trust.

Why It Matters

Why record integrity matters to agencies.

None of this is cryptography for its own sake. Fingerprints and append-only history exist to make governed records more useful to the people who rely on them:

Authorized Records Can Be Checked Later

Months or years after a meeting, an agency can verify that the record it is relying on still matches what was originally authorized — without depending on anyone's memory.

Corrections Stay Visible

When a record is corrected, the correction is a visible governed event rather than a hidden edit. Supervisors and reviewers can see what changed and when.

Outputs Stay Tied to Their Source

Summaries, action items, and routed copies remain connected to the meeting they came from, so a record can always be traced back to its source event.

A Documented Review Trail

Agencies can show who reviewed a record, when, and under what reason codes — a trail that supports oversight inquiries and internal review.

Supports Grant Documentation

Governed, verifiable records are designed to support the grant reporting, program evaluation, and oversight obligations the agency owns. NNWI.ai does not guarantee funding.

Continuity Across Turnover

When coordinators or liaisons change, meeting history and its integrity evidence stay organized and verifiable for authorized successors.

Two Different Numbers

Event IDs and hashes are different.

Governed records carry two kinds of identifiers, and they do different jobs. An Event ID helps NNWI.ai find a record. A SHA-256 hash helps verify whether the record content still matches the authorized version.

Event ID / UUID

Finds the record

A unique identifier assigned when the record is created. It helps the system locate and reference the record, and lets other governed events point at it unambiguously.

Like a filing number.

SHA-256 Hash

Verifies the content

A fingerprint computed from the record's exact content at authorization. It says nothing about where the record is filed — and everything about whether its content has changed.

Like a cryptographic fingerprint.

Next Step

Ready to see how governed records work in practice?

The five-step governance loop, the review discipline, and the pilot process are covered on How It Works. If your agency wants to put governed records to work, request a pilot and we'll schedule an intake conversation.