Technical
Lynx Seal
Reusable tamper-evident seal for records that must prove they have not changed
lynx_seal
· v19.0.1.0.0
· Standard
Alpha
What this solves
Lynx Seal
A shared mixin for records whose integrity has to be demonstrable after the fact: a signed safety card, a lab certificate, a gold pour. Sealing captures a canonical snapshot of the evidence, hashes it, and locks the record against further edits.
The mixin exists because the alternative is copying a hash algorithm into every model that needs one. Three copies of a canonical-hash routine is three chances for one of them to be fixed and the others left behind, and a seal that is subtly wrong is worse than no seal at all: it reports "valid" for a record that has in fact been altered.
Key Features
Canonical hashing - the evidence bundle is serialised with sorted keys and fixed separators before hashing, so the same content always produces the same digest regardless of dict ordering or locale.
Write and delete locking - once sealed, a record rejects edits to anything outside an explicit whitelist, and refuses deletion outright. Each host model decides what stays writable so its own workflow can still run.
Tamper detection - recomputing the hash over the live record and comparing it to the stored digest reports the record as valid or tampered.
Authorised reopening - breaking a seal is a deliberate act that requires a reason, posts to the chatter, and clears the stored proof rather than silently leaving a stale digest behind.
Optional audit anchoring - seals are emitted to the platform audit ledger when it is installed, and the emit is soft: a missing ledger, or a failing one, never blocks the business action being sealed.
Child-row protection - a helper lets a sealed parent's line models reject their own writes, so sealing a header actually freezes the document.
Integrates With
mail - seal and break events are posted to the host record's chatter.
lynx_compliance_audit_log - optional; anchors seals in the hash-chained ledger when present.
Models
lynx.seal.mixin - abstract; inherit it on any model that needs sealing.
Depends on
Try Lynx Seal on your team.
Free trial, no credit card. Talk to sales when you're ready.