4SI PERSPECTIVE · JULY 2026
The Physical
Evidence Gap
Why digitally valid evidence is not enough for high-consequence systems.
01 · THE BOUNDARY
A record can be valid.
The world can still be wrong.
Software transparency, cryptographic identity and hardware attestation are essential. They secure claims and computing environments. They do not automatically establish that the intended real-world person, asset or action is the one in front of the system.
Digital claim
A credential, record or instruction can be authentic, intact and attributable to a recognized issuer.
What the digital system can establish.02 · SELECTED PUBLIC CONTEXT
The boundary is already visible in standards and infrastructure work.
These primary sources establish the public context for this perspective. Each card separates the source record from 4SI's interpretation.
PRIMARY SOURCE · UPDATED 18 MAR 2026
IETF · SCITT WORKING GROUP
Supply Chain Integrity, Transparency, and Trust
- Source record
- SCITT defines interoperable building blocks for integrity and accountability across software and firmware supply-chain information.
- Stated boundary
- The charter explicitly excludes methods for preventing authenticated issuers from making false claims.
- 4SI reading
- Authenticated statements and transparent registries can strengthen evidence without proving the physical truth of every statement.
PRIMARY SOURCE · 27 JAN 2026
NIST · SEMICONDUCTOR TRACEABILITY
Traceability and provenance across a distributed chip ecosystem
- Source record
- NIST identifies counterfeit components, malicious tampering and opaque sourcing as threats to critical-system security and resilience.
- Open work
- The workshop focuses on adoption barriers, economic drivers, standards, roadmaps and pilot use cases.
- 4SI reading
- A digital chain of custody becomes decision-relevant only when it remains connected to the physical component being handled.
PRIMARY SOURCE · UPDATED 16 MAR 2026
NIST · GOOGLE · MICROSOFT
Trustworthy ingestion of secure silicon
- Source record
- NIST records the presenters' conclusion that cloud providers must verify hardware authenticity at scale and cannot do it alone.
- Industry context
- The same session covers tamper detection, supply-chain visibility and device-lifecycle security.
- 4SI reading
- Hardware authenticity is not only a data problem. It requires evidence tied to the physical device entering the controlled environment.
PRIMARY SOURCE · UPDATED 23 JUL 2026
NIST · AI DATA CENTER SECURITY
AI infrastructure reaches beyond models and software
- Source record
- NIST's workshop scope includes hardware, access control, supply chains, operational technology, facilities, and physical and personnel security.
- System boundary
- AI safety and trustworthiness depend on the wider infrastructure that supports training, inference and agentic workflows.
- 4SI reading
- The authority to change or operate critical AI infrastructure must survive the transition from digital instruction to physical action.
03 · THE 4SI READING
Complement the digital stack. Do not pretend to replace it.
4SI is not a replacement for PKI, hardware attestation, transparency services, inventory systems or access control.
The opportunity is to strengthen the point those systems ultimately depend on: whether the expected real-world person, asset or action is physically present when authority changes hands.
04 · WHERE THE GAP APPEARS
The same missing link. Four consequential environments.
Who is physically authorized to change a system that can act?
Sensitive hardware, facilities and operational authority.
Is this the component the record describes?
Provenance and custody for high-value assets.
Did the expected person handle the expected asset?
Maintenance, access and component control.
Can authority and custody survive a distributed operation?
Equipment, communications and field operations.
05 · START SMALLER
Start with one consequential decision.
The right starting point is not a broad deployment. It is one operational decision where existing digital controls leave a material physical uncertainty.
Bring one boundary to 4SI →- 01Decision
Which decision depends on physical certainty?
- 02Consequence
What happens if the claim is wrong?
- 03Boundary
What do existing controls fail to establish?
- 04Evaluation
What outcome would justify deeper work?
4SI PERSPECTIVE · JULY 2026
Digital trust stops at the edge of what it can observe.
4SI develops physical trust infrastructure intended to connect high-consequence decisions to stronger evidence about real-world assets, authorized presence and operational provenance.
Public records are linked to their originating institution. Source statements and 4SI interpretation remain visibly separate.
This perspective excludes proprietary architecture, protocols, implementation methods, security parameters and unpublished results.
References and entity marks identify public context only. No affiliation, validation or endorsement by the referenced institutions is implied.