RAGBAZ / river / Nostoi
Why correlated failures and incomplete observations matter when an audit trail is used to study rare, consequential events.
published · Updated 2026-10-05
01 Nostoi
If compromise events A and B were independent, their joint probability would be P(A)P(B). Independence is an assumption, not a property conferred by choosing two bucket names. A shared identity provider, credential, administrator, deployment pipeline or verification host can couple the failures.
Nostoi's multi-destination anchoring helps organise custody and expose conflicting observations. It does not estimate a joint failure distribution or claim a quantified reduction in catastrophic risk. Any numerical argument needs assumptions about common causes, evidence supporting those assumptions, and sensitivity to their failure.
02 Nostoi
A chain verifies the records it contains. It cannot establish that the producer included every relevant action, that a sensor was running during an outage, or that omitted observations resemble retained ones. If consequential failures preferentially interrupt logging, the missingness mechanism matters to any statistical interpretation.
A serious review therefore describes capture coverage, observed gaps, retention and checkpoint cadence alongside chain-integrity results. An external checkpoint bounds what can be silently rewritten relative to that reference; it does not recover events that were never recorded.
03 Nostoi
The repository reports per-trial p50, p95 and p99 native append latencies, together with the largest observed samples and durability settings. Those are empirical summaries of a specified experiment. They do not determine an extreme-value distribution, a return period or a bound on the worst possible stall.
For workload or hazard analysis, retain the experiment's scope: record sizes, sample counts, host conditions, synchronisation policy and whether observations were pooled. An audit mechanism is useful when it helps preserve those distinctions, rather than converting measurements into a universal performance claim.
04 Nostoi
For an investigation or a public procurement, specify the retained interval, the exported format, who controls capture, where checkpoints live, which keys were trusted, and how outages and contradictions are reported. Ask what was verified by an independent party and what remains the producer's assertion.
This is a technical contribution to accountable oversight, not an automatic conclusion about compliance with any particular law. Records can contain personal or confidential information; access, retention and disclosure must match the actual purpose of the investigation.
A conversation, not a sales funnel
Ask a question, tell us what you need, offer a contribution or simply show your support. RAGBAZ is a software studio working toward kindness, mutual cooperation and the good of all beings.
Prefer email? ragbaz@proton.me