Skip to content

Read what a certificate proves

Machine verified A machine ran this on our install and checked the result against the CLI. A test report is linked. CLI 0.4.0, checked 2026-11-05.

What does this certificate actually prove?

A VOLT certification grades one recorded run against a ladder of checks. See which tier it reached, and exactly which checks it passed and failed.

What you get: a certificate you can read line by line. The tier is a summary; the checks underneath say what was proven about the run and what was not.

Ask about one certification, in your own words:

quox · talking to Quox

For certification CERT_MNQW2QRR82C5794A33, which tier did it reach and which run was it for?

▤ AOCL │ L1 identity complete · allowed · 0ms

▤ AOCL │ L3 policy gate complete · proceed · 5ms

◐ QUOX │ cli ✔ QUOX │ cli │ 0 exit code, 4450 duration ms · 6.3s

⛓ AEE │ envelope opened · ops.tool · quox_cli ok

⛓ AEE │ envelope opened · stream_success

Certification CERT_MNQW2QRR82C5794A33 reached silver, the VOLT-Verified tier. It was
issued for run RUN_01KNQWMQ3DJ907PAAYCZ129E3Q.

• Passed: 9 of 15 checks. That covers all the bronze checks and all three silver ones
  (hash chain intact 32/32, sequence 1-32, genesis valid).
• Failed: 6 checks. The three gold ones failed because there is no external timestamp,
  no bundle signature and no retention info. The three platinum ones failed because
  there is no third-party audit, no compliance bundle and 0 evidence items (it needs
  10).
• Dates: certified 2026-04-09 and expired 2026-07-08. It has not been revoked.

The certification is now past its expiry date, so it no longer counts as current.

20.8s · 1 tool · 0 approvals

A real turn on our own install (CLI 0.4.0, 5 Nov 2026), replayed at speed. Names changed. Type the same words into quox.
✔ Machine verified against the CLI on 5 Nov 2026 · test report mw2urv

Quox read the certification and told you its tier, silver (VOLT-Verified), and the run it was issued for. It broke down the 9 checks that passed and the 6 that failed, and pointed out that the certificate is past its expiry date, so it no longer counts as current.

certifications
quox governance cert listCert ID                    Run                               Tier      Tier Name        Certified                   ExpiresCERT_MVF2SN3J0E84B0A248    RUN_01KWKV7XR52FESA0X4YJA9F67G    none      None             2026-10-19T09:52:30.703Z    2027-01-17T09:52:30.703ZCERT_MVCSDG4QDCE82DABC4    RUN_01KWKV7XR52FESA0X4YJA9F67G    none      None             2026-10-17T19:25:13.322Z    2027-01-15T19:25:13.322Z
From a real run on the demo workspace. First rows only.

Each row is one run graded once. A tier of none means the run did not clear the first rung of checks.

one certificate
quox governance cert get CERT_MNQW2QRR82C5794A33cert_id          CERT_MNQW2QRR82C5794A33run_id           RUN_01KNQWMQ3DJ907PAAYCZ129E3Qtier             silvertier_name        VOLT-Verifiedchecks  - code: CHAIN_INTEGRITY_FAILED    passed: yes    message: Hash chain intact (32/32)    tier: silver  - code: SEQUENCE_GAPS    passed: yes    message: Sequence monotonic (1-32)    tier: silver  - code: GENESIS_VALID    passed: yes    message: Genesis valid    tier: silver  - code: NO_TIMESTAMP    passed: no    message: No external timestamp    tier: gold  - code: NO_SIGNATURE    passed: no    message: No bundle signature    tier: gold  - code: RETENTION_TOO_SHORT    passed: no    message: No retention info    tier: gold  - code: NO_THIRD_PARTY_AUDIT    passed: no    message: No third-party audit    tier: platinum  - code: NO_COMPLIANCE_BUNDLE    passed: no    message: No compliance evidence    tier: platinum  - code: INSUFFICIENT_EVIDENCE    passed: no    message: 0 items (need 10)    tier: platinumsummary  total_checks: 15  passed: 9  failed: 6certified_at     2026-04-09T03:00:00.135Zexpires_at       2026-07-08T03:00:00.135Zrevoked_at       -
From a real run on the demo workspace. The six passing bronze checks left out.

Each check names the tier it belongs to. A run reaches a tier only when every check on that rung and the rungs below it passes. Here the silver checks all pass, so the run is silver; the gold rung needs an external timestamp, a signed bundle and retention info, which this run never had.

To find the newest certificate for a run you already know:

Terminal window
quox governance cert for-run <runId>

You read the grade and the reasons for it. The certificate does not ask you to trust the tier: every check that earned it, and every one that held it back, is in the record.

Compare certified_at and expires_at with today’s date. A certificate past its expiry still shows what was proven at the time, but it is no longer current.