<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Tiffany Greene</title>
    <description>The latest articles on DEV Community by Tiffany Greene (@trgreene4).</description>
    <link>https://dev.to/trgreene4</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4233258%2Fe6aa2d65-618d-4439-988b-a08f02eb08af.jpg</url>
      <title>DEV Community: Tiffany Greene</title>
      <link>https://dev.to/trgreene4</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/trgreene4"/>
    <language>en</language>
    <item>
      <title>Why my evidence logs use two clocks: building AETHER-0</title>
      <dc:creator>Tiffany Greene</dc:creator>
      <pubDate>Sun, 08 Nov 2026 07:49:02 +0000</pubDate>
      <link>https://dev.to/trgreene4/why-my-evidence-logs-use-two-clocks-building-aether-0-1jf</link>
      <guid>https://dev.to/trgreene4/why-my-evidence-logs-use-two-clocks-building-aether-0-1jf</guid>
      <description>&lt;p&gt;Most logging systems stamp an event with one wall-clock time and move on. That's fine for debugging. It isn't enough when someone may later ask a court to accept a log as evidence.&lt;/p&gt;

&lt;p&gt;AETHER-0 is my portfolio project: a telemetry verification engine that brings legal evidence standards and systems engineering together. This post covers three design decisions behind it.&lt;/p&gt;

&lt;h2&gt;
  
  
  1. Two clocks, one hash
&lt;/h2&gt;

&lt;p&gt;Wall clocks can jump. NTP corrections, manual changes and leap handling can all move UTC time backward or forward. A monotonic clock (&lt;code&gt;performance.now()&lt;/code&gt;) never goes backward, but on its own it doesn't tell you the date.&lt;/p&gt;

&lt;p&gt;AETHER-0 records &lt;strong&gt;both&lt;/strong&gt; for each event:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Primary monotonic clock&lt;/strong&gt;: gives ordering and elapsed time you can trust.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Secondary UTC wall clock&lt;/strong&gt;: gives a human-readable anchor in real time.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Both values are sealed into the event's SHA-256 digest at capture. If someone edits either timestamp afterward, the hash no longer matches.&lt;/p&gt;

&lt;p&gt;Full guide: &lt;a href="https://aether-0.lovable.app/docs/dual-clock-timestamps" rel="noopener noreferrer"&gt;https://aether-0.lovable.app/docs/dual-clock-timestamps&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  2. FRE 902(13) vs 902(14): two rules, two questions
&lt;/h2&gt;

&lt;p&gt;Under the US Federal Rules of Evidence, certain records can be self-authenticating if a qualified person certifies them.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;902(13)&lt;/strong&gt; covers a record &lt;em&gt;generated by an electronic process or system&lt;/em&gt;: is this what the system actually produced?&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;902(14)&lt;/strong&gt; covers data &lt;em&gt;copied&lt;/em&gt; from a device or file: does this copy match the original? Hash comparison answers that.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;AETHER-0 issues one bifurcated certificate that addresses both: the capture-time seal for 902(13), and the digest match for 902(14).&lt;/p&gt;

&lt;p&gt;Full guide: &lt;a href="https://aether-0.lovable.app/docs/fre-902-13-vs-14" rel="noopener noreferrer"&gt;https://aether-0.lovable.app/docs/fre-902-13-vs-14&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  3. Zero retention
&lt;/h2&gt;

&lt;p&gt;The safest personal data is data you never keep. AETHER-0 runs in volatile memory only: no unencrypted, client-identifiable content is persisted, and the spec includes a duress protocol that zeroizes keys and wipes buffers immediately.&lt;/p&gt;

&lt;p&gt;Even the built-in AI assistant follows this rule. It stores no chats, logs no messages, and answers only from the published specs, with citations.&lt;/p&gt;

&lt;p&gt;Zero-retention spec: &lt;a href="https://aether-0.lovable.app/docs/zero-retention" rel="noopener noreferrer"&gt;https://aether-0.lovable.app/docs/zero-retention&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  Bonus: a cross-border handoff simulation
&lt;/h2&gt;

&lt;p&gt;The site also includes a training-only &lt;strong&gt;Emergency Handoff Console&lt;/strong&gt;. It's a simulation of incident handoffs across El Paso County, Doña Ana County and Ciudad Juárez, using real Census and OpenStreetMap borders and real hospital locations. The incidents, units and hospital status are all fictional, and every screen says clearly that it is &lt;strong&gt;not for emergency use&lt;/strong&gt;. Its audit log is SHA-256 hash-chained, so any tampering breaks verification.&lt;/p&gt;

&lt;h2&gt;
  
  
  Try it
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;Site and specs: &lt;a href="https://aether-0.lovable.app" rel="noopener noreferrer"&gt;https://aether-0.lovable.app&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Code: &lt;a href="https://github.com/tiffanygreene09241993/AETHER-0-Borderless-Emergency-Handoff-Router" rel="noopener noreferrer"&gt;https://github.com/tiffanygreene09241993/AETHER-0-Borderless-Emergency-Handoff-Router&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;I'd love feedback from forensic engineers and legal-tech folks, especially: what would you need to see before trusting a log like this?&lt;/p&gt;

</description>
      <category>cybersecurity</category>
      <category>webdev</category>
      <category>career</category>
      <category>database</category>
    </item>
  </channel>
</rss>
