Sealed Evidence Package¶
Tamper-evident custody enclosure — instantiates Portable Dependency Envelope
Encloses an item and its chain-of-custody record behind a tamper-evident seal, so every handler can move it and prove it arrived unaltered without opening it.
A Sealed Evidence Package encloses an item together with the record of its own handling — who held it, when, and every transfer — behind a seal that cannot be breached without leaving a visible mark. Its defining idea is that integrity is provable end to end through untrusted hands: the seal makes any tampering evident, and the bound custody log makes every touch accountable, so a skeptical third party can later confirm the item is exactly what was collected. Where a signed attestation vouches for an item's origin, this vouches for its handling in transit; and where an ordinary container hides contents merely for convenience, here the sealed boundary exists specifically so that no one can reach the interior unobserved.
Example¶
A blood sample is collected at a scene. It goes straight into a Sealed Evidence Package: the vial inside a tamper-evident bag, the seal signed and timestamped, a custody form bound to the outside. The package then travels through many hands — the collecting officer, a courier, the laboratory, secure storage, and finally the courtroom. At each transfer the receiver checks that the seal is intact and signs the log; nobody needs to open the bag to accept responsibility for it.
Months later, admissibility turns on that unbroken seal and complete log. Together they establish that the sample could not have been swapped or contaminated without someone noticing and without a gap in the record. When the lab genuinely needs the contents, breaking the seal is itself a logged, authorized event that appends a new entry and re-seals — so even legitimate access leaves a trace rather than a hole.
How it works¶
- One way in, and it shows. The item is enclosed so the only route to the interior is to visibly break the seal — tamper-evidence, not tamper-proofing.
- Custody bound to the object. A record every handler signs on transfer travels with the package, turning "we think it was fine" into a named, timestamped chain.
- Checkable without opening. The seal state is externally legible, so a handler verifies integrity by inspection rather than by breaching it.
- Controlled break-and-reseal. Authorized access is a defined event that appends to the log and applies a fresh seal, so the chain continues rather than ending.
Tuning parameters¶
- Seal type — tamper-evident tape, a numbered security seal, or a cryptographic hash for digital evidence: stronger seals cost more handling effort per transfer.
- Granularity — one seal around the whole package versus a seal per item: per-item sealing isolates a breach but multiplies the checks every handler must perform.
- Custody-log medium — a paper form versus a digital ledger: paper is frictionless in the field; a ledger is harder to back-date but needs infrastructure.
- Access policy — who may break the seal, under what authority, and the rule for re-sealing afterward.
- Boundary scope — whether the enclosure holds only the item or also its context samples and collection notes.
When it helps, and when it misleads¶
Its strength is that integrity becomes provable to a hostile audience — a court — and that accountability attaches to every hand the item passed through, even across parties who do not trust one another.
Its central weakness is that integrity here is all-or-nothing: a single unlogged transfer or one seal accepted without inspection can void the entire chain, no matter how careful everyone else was. A seal that is checkable but never actually checked gives only the feeling of assurance. And the classic misuse is reconstructing or back-dating the custody log after the fact to paper over a gap — manufacturing provenance — which is precisely what the append-only, contemporaneous discipline exists to prevent. The safeguard is to log at the moment of transfer[1], verify the seal at every hand-off, and treat any gap as fatal rather than patchable.
How it implements the components¶
Sealed Evidence Package fills the boundary-and-accountability side of the envelope — the components a tamper-evident enclosure operates:
interior_exterior_boundary— the tamper-evident seal is the boundary: the interior is unreachable without visibly breaching the exterior.escape_and_override_boundary— authorized break-seal-and-reseal is the controlled override of that boundary, logged so the exception is itself accountable.observability_and_health_surface— the custody log and the externally-checkable seal state expose the package's handling history and current integrity without opening it.
It does not attest the item's origin or authenticity of manufacture — that is Signed Artifact Attestation — and it does not standardize a handling interface for bulk logistics, which is Standard Shipping Container and the Intermodal Handling Protocol.
Related¶
- Instantiates: Portable Dependency Envelope — it applies the envelope to items whose provenance of handling must survive movement through untrusted hands.
- Sibling mechanisms: Signed Artifact Attestation · Standard Shipping Container · Field Kit Packout · Intermodal Handling Protocol · Deployment Manifest · OCI Container Image
Editorial Notes¶
Form Classification¶
Form family: Structure, Architecture & Configuration
Rationale: Sealed Evidence Package operates as a configured physical, technical, or logical arrangement whose structure creates the effect because it encloses an item and its chain-of-custody record behind a tamper-evident seal, so every handler can move it and prove it arrived unaltered without opening it.
Independent corroboration: The frozen evidence defines Sealed Evidence Package as 'Encloses an item and its chain-of-custody record behind a tamper-evident seal, so every handler can move it and prove it arrived unaltered without opening it', so its operative form is Structure, Architecture & Configuration.
Nearest alternative: Record, Log & Register — Sealed Evidence Package includes features of a persistent ledger, log, register, or case record that preserves history and traceability, but its defining operation is a configured physical, technical, or logical arrangement whose structure creates the effect.
Review outcome: Independent reviewer agreement; medium confidence.
Origin Attribution¶
Primary origin: Criminology & Forensic Studies
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Specialized
Rationale: Tamper-evident sealing, labeling, custody transfer, and controlled reopening are core forensic evidence-handling operations. NIST/OSAC evidence guidance specifies packaging, sealing, identification, and chain-of-custody practices; law and information stewardship supply admissibility and record controls.
Related originating lineages:
- Law & Governance — Legal doctrine, regulatory governance, and procedural accountability supplies a parallel or contributing lineage for the mechanism's defining operation: encloses an item and its chain-of-custody record behind a tamper-evident seal, so every handler can move it and prove it arrived unaltered without opening it.
- Library & Information Science — library_information_science contributes retrieval, classification, metadata, findability, and durable stewardship to this mechanism's defining operation—Encloses an item and its chain-of-custody record behind a tamper-evident seal, so every handler can move it and prove it arrived unaltered without opening it—without displacing the selected primary historical lineage.
- Security Studies & Intelligence Analysis — Security packaging independently protects integrity during transport.
Review resolution: The blind reviewers disagree on primary lineage (law_governance versus criminology_forensic). Authoritative or primary research supports criminology_forensic as the best historical origin: Tamper-evident sealing, labeling, custody transfer, and controlled reopening are core forensic evidence-handling operations. NIST/OSAC evidence guidance specifies packaging, sealing, identification, and chain-of-custody practices; law and information stewardship supply admissibility and record controls. The cited NIST/OSAC, Standard Guide for Collection of Soils and Other Geological Evidence directly supports the mechanism's defining operation. All independently supported contributing domains are retained without an arbitrary cap. origin_mode=cross_disciplinary_synthesis records the lineage relationship, while domain_reach=specialized records later applicability separately from provenance.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Researched adjudication after independent review; high confidence.
Sources consulted:
Notes¶
The seal is tamper-evident, not tamper-proof: it does not prevent access, it makes access visible. The entire value therefore rests on someone actually inspecting the seal and honoring the log at every transfer — a package whose seal is never checked has a boundary in form but not in force.
References¶
[1] National Institute of Justice. Crime Scene Investigation: A Guide for Law Enforcement. NCJ 243598 (2013). Requires the custody log to be updated at the moment of transfer. registry ↩