BEDROCK derives that answer from dated evidence every time you read it — then names the document responsible. Nothing is stored as a status, so a badge can never outlive the paperwork behind it.
Six assets. Badges derived at read time from the evidence bundle beneath each one — three resolve negative on purpose, because a register that only ever prints performing has not been shown to work. Select any row for its dossier.
Seeded preview register: asset figures are illustrative while operator ingestion is in progress. The ruleset running on them — tier hierarchy, freshness windows, weakest-binds arithmetic, classifier version — is the production ruleset, and it is the same file this page tests against.
Five independent signals reduce to one score, and the lowest signal binds it outright. No average, no weighting, no smoothing — a solar farm with immaculate panels and an expired interconnect delivers zero, and no amount of panel health averages that away.
Band describes signal strength only. The evidence badge is a separate statement — an asset can be corroborated on signals and still disputed on evidence.
Each remark drifts every signal, re-derives the minimum, and moves the — binding tag to whichever signal is actually lowest. Selecting a register row loads that asset's signals here.
Four asset classes, three evidence tiers, one derivation path. Everything on the register comes out of the rules below — and the classifier version that produced it travels with every output.
A class is admitted only once it has one unit of delivery to be measured in and a written list of ways it stops delivering. An asset nobody can state a failure mode for cannot be underwritten — only marketed.
| Code | Asset class | Measured in | Failure modes | Window |
|---|
The tier of the strongest fresh adverse document decides how far a status may fall. External signals alone never produce a final negative.
Full downgrade. An adverse finding here can move an asset to impaired on its own, because someone with liability attached made the statement.
Partial downgrade only. A fresh adverse operator report moves an asset to watch — a real signal, but testimony about itself, so it may not assert impairment alone.
Never final. Useful for pointing at something, useless for concluding it. An asset whose only adverse signal is external falls to disputed — the register is stating that it does not yet know.
Past the class window the bundle stops supporting any conclusion and the asset falls to disputed. The register will not call an asset impaired on stale paperwork — and will not call it performing either.
Status is a function, not a field. It is computed on every read and thrown away, so a badge can never outlive the document that justified it.
Documents arrive tagged with tier, polarity, reference and date. Nothing is admitted without a date.
Freshest document is measured against the class window. Past it, the bundle stops supporting conclusions.
Strongest fresh adverse document is selected. Its tier sets the floor a status may fall to.
Five signals reduce by minimum. The lowest binds the composite and is named in the output.
Badge, reason, binding document, evidence age and classifier leave together. Nothing is persisted.
BEDROCK is not a marketplace and not a yield aggregator. It answers one question and shows which document the answer rests on.
| BEDROCK register | Infra fund reporting | Tokenised-infra platform | Rating agency | |
|---|---|---|---|---|
| Status origin | Derived per read from evidence | Quarterly narrative letter | Field written at listing | Committee opinion |
| Aggregation | Weakest signal binds | Portfolio average | Composite marketing score | Weighted scorecard |
| Stale evidence | Falls to disputed, age printed | Carried until next letter | Left as last known good | Under review, unpublished |
| Self-reported data | Capped at watch, never impaired | Accepted as reported | Accepted as reported | Adjusted, method opaque |
| Adverse press only | Disputed, not downgraded | Usually unaddressed | Usually unaddressed | Watchlist, timing discretionary |
| Rule versioning | Classifier stamped on output | None | None | Methodology PDF, undated on output |
| Failure disclosure | Binding document named | Aggregated away | Not surfaced | Summarised |
The token pays for the expensive half of this: paperwork-tier evidence. Independent engineer reports, meter audits and capacity tests cost money — and they are the only documents allowed to move a status to impaired.
A register whose evidence budget runs out silently degrades to operator self-reporting. Funding the top tier is the only thing that keeps impaired reachable at all.
Reading the register is never token-gated. Gating evidence behind a token would make the honest answer a paid product, which defeats the point of publishing one.
Stated plainly, including what is not done. The deriver and the composite rule are finished and tested; live operator ingestion is not.
Tier ranking, polarity handling, freshness guard, external-only ceiling. Versioned as bdrk-deliver/1.2.0 and stamped on every output.
Score anchored to the minimum signal, quantised so the printed row and printed score reconcile exactly. Verified over 2,000 randomised cycles with no violations.
Three assets seeded to resolve watch, impaired and disputed, so the deriver is demonstrably running rather than defaulting green.
SCADA, dispatch-log and BMS adapters that carry tier and date through automatically. Until this lands, register figures are a seeded preview rather than a feed.
Independent-engineer and meter-audit documents stored with content hashes, so a cited reference can be checked against the file that was read.
A published route for an operator to contest a badge with counter-evidence, and a record of the contest attached to the asset either way.
Mechanism answers. If something is not built yet, it says so.
round(min(signals) × 100). Nothing else enters it. Five signals of 0.94, 0.91, 0.88, 0.83, 0.57 produce 57, not the mean of 82. Physical infrastructure behaves this way: a solar farm with immaculate panels and an expired interconnection permit delivers zero, and no amount of panel health averages that away.watch — the register is not ignoring it. But asserting impairment is a consequential claim, so it requires a document someone outside the asset attached liability to: an independent engineer report, a meter audit, a regulator filing, a capacity test certificate.disputed and the age is printed next to it. This cuts both ways deliberately: the register will not call an asset impaired using a 400-day-old adverse certificate, and it will not call it performing on a bundle 47 days past a 30-day window either. disputed means the register does not currently know, which is a real answer.badge, reason, ageDays, stale and the composite score are all derived on each read and discarded. The badge and the document behind it therefore cannot drift apart.watch, a capacity certificate below covenant that must resolve impaired, and an all-positive but 47-day-old bundle that must resolve disputed. An all-green register proves nothing about whether the deriver ran; a register that produces the right negative on demand does.bdrk-deliver/1.2.0, so a status can always be read against the ruleset that produced it rather than against whatever the ruleset became later.SOL), interconnect and transmission (GRD), water rights and allocations (WTR), battery storage (STO). A class is admitted only when it has a single unit of delivery to be measured in and a written list of failure modes. An asset nobody can describe a failure path for cannot be underwritten, only marketed.