lifecycle · provenance · custody

Every robot has a history.

A serial number tells you what a robot was when it left the factory. A RIN can tell you what happened after.

Ownership transfers. Repairs. Software updates. Configuration changes. Inspections. Incidents. Recalls. Restrictions. Insurance status. Decommissioning.

One persistent identity. One lifecycle record.

A permanent record for Physical AI

Robots are software-defined physical assets. Their risk, capabilities and condition can change dramatically over time. The RIN Lifecycle Record creates a persistent history connecting the physical machine to the events, people, organizations, software and configurations that shaped its operational life.

Persistent Identity

The RIN remains associated with the robot throughout its lifecycle. It does not change when the robot is sold, leased, reassigned, refurbished, re-flashed or suspended.

Chain of Custody

Ownership, custody and operational responsibility can each change without changing the robot's identity — legal owner, possessor, operator and service custody are tracked separately.

Service & Configuration History

Repairs, component replacements, hardware modifications, software and model updates, and autonomy changes are associated with the RIN.

Incident & Compliance History

Incidents, near misses, recalls, restrictions, inspections and remediation become part of the lifecycle record.

Verifiable Provenance

Lifecycle events carry authenticated source information, attestations, signatures, configuration hashes and evidence references — not just claims.

Permissioned Transparency

Not all records should be public. RIN supports distinct access levels for the public, owners, operators, OEMs, insurers, facilities, regulators and investigators.

Ownership can change. The RIN cannot.

A robot can be owned by one company, leased to another, operated by a fleet manager, and temporarily held by a service provider — all at once. Those relationships are recorded as chain of custody, not as new identities. A robot with a problematic operational history cannot erase that history by changing owners, operators, fleets or labels.

What a transfer records

  • · Previous and new registered owner
  • · Transfer type — sale, lease, custody, fleet reassignment, refurbishment, repossession, recovery
  • · Timestamp and jurisdiction
  • · Outgoing- and incoming-party confirmation
  • · RIN registry verification and signature status
  • · Configuration, trust status, open recalls and restrictions at the moment of transfer

What the registry stores

The RIN Clearinghouse verifies provenance, integrity, metadata, cryptographic hashes and references — the material needed to trust the record. It is not a warehouse for every video, sensor file or proprietary software package. Sensitive underlying evidence stays with the party that holds it and is released under permission.

The identity transfers. The history does not reset.

Where lifecycle history lives in the protocol

Lifecycle Provenance and Chain of Custody are not a separate layer. They are cross-layer capabilities expressed through layers the protocol already defines.

Identity Layer

The persistent RIN that every record attaches to.

Configuration Layer

Hardware, software, model and autonomy state over time.

Responsibility & Compliance Layer

Who is accountable, and under which rules.

Cybersecurity Layer

Device identity, signed updates, patches and compromises.

Event & Evidence Layer

The chronological, verifiable history of meaningful events.

Public Trust Layer

What the public can see, and what stays permissioned.