How it works
Connect once.Then it runs on its own.
Four steps, three parties, one record that none of them can rewrite.
Sixty seconds on how this works.
Why the usual sealed copy is worth less than it looks, and what a deposit looks like when somebody checks it every day.
- 01
Connect the repository
VendorThe vendor grants read access to the repository. Nothing else, and nothing to upload by hand.
- 02
Daily deposit
MachineEvery day — or on every release tag — 42escrow takes a copy, bundles it and encrypts it with its own data key.
- 03
Checksum & record
MachineEach version gets a SHA-256 and an entry in an append-only log that hashes the entry before it.
- 04
Release by procedure
Lawyer decidesIf an agreed trigger event occurs, evidence is reviewed and the release approved. Only then does the licensee receive the code.
Example · deposit log
helios-core · Vendor ↔ Licensee
Daily at 02:00 UTC · retention 7 years
- Deposit #412 sealed · a3f91c2done · 02:02Machine
- SHA-256 recorded · 9f2b…4e92done · 02:02Machine
- Log entry chained to #2,113done · 02:02Machine
- Licensee recomputed hash — matchdone · 09:41Licensee
- Release request — evidence under reviewwaitingLawyer decides
- Next depositplanned · 02:00Machine
Whose move
42escrow
Evidence review for the release request.
Rule
Two-officer approval
No single person can release code.
Release procedure
Application 0041-R1
Ground: support discontinued
- 1
Release application received
2026-10-23
- 2
Copy sent to the Depositor within three business days
2026-10-24
- 3
Objection period of 14 calendar days
until 2026-11-07
- 4
Release or expert determination
from 2026-11-07
9 of 14 calendar days remaining
A bare denial is not an objection.
Already have an escrow clause?
Then only the implementation is missing. Send it over and we'll tell you what it takes.
Get in touch