
# Inspiration

As global supply chains, critical infrastructure, and technology ecosystems become increasingly interconnected, organizations face growing challenges in verifying trusted vendors, suppliers, and strategic partners. Our team was inspired by the need to strengthen Canada's economic and technological sovereignty by providing stakeholders with a tool capable of validating trust, transparency, and compliance across interconnected systems.

We wanted to create a solution that supports informed decision-making, improves visibility into supply chain relationships, and helps organizations identify risks before they become strategic vulnerabilities. ACRA_verify was designed with the vision of helping Canada and its allies build more resilient, trustworthy, and sovereign ecosystems.

# What it does

ACRA_verify is a verification and integrity analysis platform that evaluates relationships between organizations, suppliers, components, and dependencies using graph-based analysis.

The platform models entities as nodes and relationships as edges in a directed graph, enabling users to:

- Verify cryptographic authenticity using **EdDSA25519** signatures.
- Traverse dependency chains using **Directed Acyclic Graph (DAG)** analysis.
- Detect missing references and incomplete attestations.
- Identify impossible ordering conditions within dependency chains.
- Prevent cyclic dependencies and trust loops.
- Improve visibility into supply chain and software provenance relationships.
- Support compliance objectives aligned with Canadian cybersecurity guidance and allied security frameworks.

By combining cryptographic verification with graph traversal, ACRA_verify helps decision-makers establish trust while maintaining transparency across complex systems.

# How we built it

We built ACRA_verify using a graph-oriented architecture focused on integrity verification, transparency, and scalability.

Our verification engine models attestations, dependencies, and trust relationships as a DAG. This allows us to traverse nodes and edges efficiently while enforcing ordering constraints and validating chain integrity.

To establish authenticity, we implemented **EdDSA25519 digital signature verification**, enabling validation of signed records before they are admitted into the trust graph.

The graph processing engine performs:

1. Signature validation.
2. Node ingestion.
3. Edge construction.
4. DAG traversal.
5. Reference validation.
6. Cycle detection.
7. Integrity reporting.

By combining cryptographic verification with graph analytics, the platform can identify inconsistencies that would be difficult to detect through manual review.

### Example: EdDSA25519 Verification

```python
is_valid = verify_signature(
    public_key,
    message,
    signature
)

if is_valid:
    graph.add_node(attestation)

Example: DAG Traversal

for node in graph.topological_sort():
    verify_dependencies(node)
    validate_references(node)

Example: Cycle Detection

if graph.has_cycle():
    raise IntegrityError(
        "Circular trust relationship detected"
    )

Example: Missing Reference Detection

for edge in graph.edges:
    if edge.target not in graph.nodes:
        report_missing_reference(edge)

Challenges we ran into

One of the biggest challenges involved frontend development and user interface refinement.

As we rapidly iterated during development, we encountered issues related to:

Component rendering inconsistencies.
State synchronization bugs.
Responsive layouts.
Dynamic graph visualization.
Real-time updates during verification workflows.
Error reporting and user feedback mechanisms.

Visualizing graph relationships in a way that remained understandable while scaling to larger datasets required multiple iterations of the user interface.

Another challenge was balancing implementation time with ambitious functionality. Several features were proposed but not fully implemented during the event, including:

Automated supply chain risk scoring.
Continuous monitoring and alerting.
Enhanced graph visualization.
Multi-jurisdiction compliance reporting.
Historical trust-chain analysis.
Federation across allied verification networks.

Accomplishments that we're proud of

We're especially proud of the teamwork behind ACRA_verify.

Our team successfully combined cybersecurity, software engineering, frontend development, and product design efforts to transform a complex concept into a functional prototype within a limited timeframe.

Some accomplishments include:

Implementing EdDSA25519 signature validation.
Building a DAG-based verification engine.
Detecting impossible dependency ordering.
Preventing circular trust relationships.
Identifying missing references automatically.
Providing greater visibility into trust relationships.
Aligning our approach with principles described in ITSAP.00.143, emphasizing transparency, visibility, and traceability.

Most importantly, we worked together effectively under pressure and delivered a solution that addresses a real-world strategic challenge.

What we learned

Through this project, we learned that trust verification requires more than cryptography alone.

Digital signatures can prove authenticity, but graph analysis is necessary to understand relationships, dependencies, provenance, and risk across entire ecosystems.

We gained practical experience in:

EdDSA25519 implementation.
DAG traversal algorithms.
Topological sorting.
Cycle detection.
Integrity verification workflows.
Frontend graph visualization.
Rapid prototyping under time constraints.
Cross-disciplinary teamwork.

We also learned how critical visibility and traceability are when building systems intended to support national and allied technological sovereignty.

What's next for ACRA_verify

Our goal is to continue evolving ACRA_verify into a production-ready platform capable of supporting trusted verification workflows across government, industry, and allied organizations.

Future development areas include:

Real-time supply chain monitoring.
Advanced risk scoring and analytics.
Automated trust-chain auditing.
Integration with additional attestation sources.
Enhanced graph visualization.
SBOM and software provenance integration.
Cross-jurisdictional verification support.
API integrations for government and enterprise partners.
AI-assisted anomaly detection.
Federation with allied trust and verification networks.

Ultimately, we envision ACRA_verify becoming a trusted platform that helps organizations strengthen supply chain resilience, improve transparency, reduce hidden risk, and contribute to Canada's and its allies' sovereignty, security, and economic competitiveness.