Evidence
Downloads
What can be downloaded from an evidence package, who may download, and how to present a package to someone outside MapProtector.
Last revised
A package’s assets are downloaded from its page, one at a time, each with its fingerprint beside it. Reading and downloading evidence needs only the Viewer role: hiding the thing that proves a finding from the people looking at the finding makes no sense.
What is downloadable
| Asset | Downloadable | Notes |
|---|---|---|
| Canonical manifest | Yes | The structured record, as the bytes that were hashed. |
| Files attached by a user | Yes, with an acknowledgement | Uploaded files are not scanned for malware in this environment. One is retrieved by a Legal Reviewer, Analyst or above — not a Viewer — by ticking an acknowledgement of that on the package page, as a download only; the retrieval is recorded as unscanned. See Screenshots and captured files. |
Downloading
- Open the package from Compliance › Evidence or from its case.
- In the assets section, choose Download beside the asset. The file’s SHA-256 is shown beside the link so the recipient can check it.
- Every download is served through your session and recorded; there is no link that works without signing in, and nothing is hosted at an address somebody could guess.
- For a file your team attached, tick the acknowledgement beside it and choose Download unscanned file. The control is offered to the Legal Reviewer, Analyst and above; a Viewer sees the file listed with its fingerprint and is told why it cannot be retrieved. There is no link to an unscanned file; the acknowledgement travels with the request.
Presenting a package to someone else
- Send the manifest with its fingerprint and the sealing details (sealed at, sealed by, sealing version). The recipient can recompute the SHA-256 and compare.
- Describe it accurately: MapProtector’s record of what the source reported at the observed instant, judged against the policy version named in it. It is not a screenshot. See Screenshots and captured files.
- If the seller’s standing has changed since, say so. The package records the standing at capture, which is the truthful value for that date.
Legal reviewers
The Legal Reviewer role reads everything and changes nothing. It is intended for counsel and for handoff: a Legal Reviewer can open every case, every package and every notice, and download evidence, without being able to confirm, seal, approve or send.