Chain of Custody Protocol for Digital Evidence

1. Objective and transversal scope

This protocol documents the method by which William Guindon and his site guarantee the provenance, authenticity and cryptographic integrity of all probative elements (official documents, field data, water and soil analyses, screenshots, correspondence, CCE (Commission for Environmental Cooperation) and UN depositions), in order to be able to demonstrate, before any jurisdiction or international body, that a part has not undergone any modification and existed on a certified date.

A rigorous evidentiary “chain of custody” is based on three inseparable pillars: authenticity (identified source of origin), integrity (absence of alteration), and traceability (complete history of technical manipulations and transfers).

2. General principles

1. Keep the raw original and work exclusively on copies.
2. Minimize handling; document each technical manipulation.
3. Reliably and independently timestamp each important element.
4. Secure storage (controlled access) and maintain redundant backups.
5. Document the collection method (source, date, device, context).

3. Using OpenTimestamps (decentralized timestamping)

The site notably uses OpenTimestamps to prove, independently and verifiable by a third party, that a file existed in a given state at a specific time:

• We calculate the cryptographic fingerprint (hash SHA-256) of the original file;
• This fingerprint is anchored in the Bitcoin blockchain by OpenTimestamps, which produces a receipt (.ots);
• The .ots receipt and the original file are kept together;
• At any time, a third party or a court can verify for free that the file has not changed.

Honest Transparency: OpenTimestamps proves the existence and integrity of a file on a date, but does not alone prove the veracity of its contents. It adds to the context documentation.

4. Email archiving and internal registry

William's professional emails are archived in their entirety (headers, body, attachments). The email measurement tool (mail tracker) only reports an approximate number of opens and does not collect any personally identifying data. A dated internal register records identifiers, hashes, dates and transfer histories.

5. Secure storage

Sensitive elements are kept in a secure storage space with controlled access (William and his parents), with regular backups. Keys and identifiers are never transmitted to a third party or to an AI model.

This protocol is an independent policy of williamguindon.me. Operational details remain internal. No signature is required.