Tamper-Evident Consortium Ledger

Every member holds a private, append-only immudb database for each consortium they belong to. Signed share events are appended on both sides: the sender’s outgoing tape and the recipient’s incoming tape. immudb’s Merkle structure makes the tape tamper-evident: any after-the-fact edit invalidates the proof for every subsequent entry.

ICDB’s broker is a blind encrypted relay. Members hold their own ledgers; the broker only routes ciphertext between them.

Because proofs are scoped per-consortium (one immudb database per group you belong to), you can produce an audit-grade export for a single consortium’s regulator, auditor, or peer-in-dispute without leaking the existence of any other consortium you participate in.

The result is permissioned multi-party data exchange without consensus: the resilience and audit guarantees of a blockchain without tokens, without miners, without a central orderer.