Local-first evidence readiness

Find the missing source before the passport fails.

DPP Preflight joins product data, BOMs, suppliers, and evidence files into one auditable handoff for the next Digital Product Passport validation layer.

No upload. No account. No compliance theater.

A fictional desk lamp separated into an aluminium base, steel arm, LED board, wiring, fasteners, and three paper evidence records.
One fictional product. Four source files. Every evidence owner visible.

Intentional-gap fixture

The demo fails usefully.

55.5
readiness score
9
blocking checks
11
owner requests
8
verified bundle files

Portable output

A review artifact, not another data-entry screen.

Open the report in a browser, triage a CSV in procurement, hand JSON-LD to engineering, and verify the same ZIP offline.

01

Gaps with owners

Missing BOM fields, evidence files, dates, hashes, facilities, and access roles become concrete source requests.

Download gaps.csv
02

Evidence receipts

Local evidence bytes receive SHA-256 receipts and a manifest. Path traversal and silent overwrites are rejected.

Open source receipt
03

Readiness draft

A JSON-LD draft and GS1 Digital Link QR prepare the handoff without pretending to be a Registry submission.

Open JSON-LD draft
04

Deterministic bundle

Identical sources, rule pack, tool version, and timestamp produce byte-identical archives for independent review.

Download demo ZIP

Upstream by design

Use it before formal schema validation.

  1. LoadProduct JSON, BOM CSV, supplier CSV, evidence ledger and local files.
  2. Reconcile23 dated checks connect every gap to a field and source owner.
  3. HandoffReport, requests, JSON-LD, QR, receipts, and manifest travel together.
  4. ValidateApply the authoritative product-specific model and Registry process next.

Two commands to evidence

Clone, analyze, verify.

Node.js 20 or newer. The analysis path does not access the network.

$ npm ci
$ node src/cli.js analyze \
    --input-dir examples/northstar-gaps \
    --out dist/preflight \
    --allow-gaps
$ node src/cli.js verify \
    dist/preflight/dpp-preflight-bundle.zip

Clear boundary

A 100 score is readiness, not a legal claim.

The dated horizontal rule pack helps teams repair operational source data. Product-specific delegated acts, formal schemas, signatures, trusted time, conformity assessment, and Registry submission remain authoritative downstream work.