Investigative capture
Capture a volatile public or otherwise authorized online source at a documented point in time.
WEB EVIDENCE CAPTURE + ARCHIVING
Preserve the web before it changes.
MODLAN combines on-demand online evidence capture with an architecture for authorized recurring archives, version history, integrity manifests, retention, legal hold, and evidence-ready export. The objective is not a prettier screenshot—it is a record whose source, time, bytes, transformations, and custody can be reconstructed later.
SOURCE
CAPTURE
HASH
VERSION
HOLD
EXPORT
synthetic workflow visualizationTWO DIFFERENT PROBLEMS · ONE EVIDENCE SPINE
Investigative capture and records archiving should meet at integrity.
Authorized version archive
Re-capture owned or expressly authorized sources on a defined schedule and preserve deltas between versions.
Legal-hold retention
Suspend ordinary disposition for scoped records while preserving access, integrity, and hold history.
Evidence-ready export
Produce source artifacts with a manifest, integrity references, capture context, and supported archival/review formats.
CAPTURE MANIFEST
Every acquisition should explain itself.
The V100 capture-receipt layer can generate SHA-256 artifact records and, when an Ed25519 signing key is configured server-side, cryptographically sign the canonical capture receipt. If signing is not configured, the system says NOT SIGNED rather than fabricating a signature.
01Source URL
02Acquisition time (UTC)
03Collector / service identity
04Capture method
05Browser/runtime context
06Artifact MIME + size
07SHA-256 per artifact
08Collection digest
09Source title / visible context
10Derivative lineage
11Retention / hold state
VERSION INTELLIGENCE
What changed can matter as much as what exists now.
Document the earliest acquisition available to the matter.
Preserve revisions, removals, additions, and visible context deltas between authorized captures.
Legal-hold state suspends ordinary disposition without rewriting retention history.
Keep source artifacts distinct from OCR, review PDFs, annotations, and other derivatives.
EVIDENCE DOCTRINE
Cryptography answers specific questions—not every question.
- Screenshot last and never alone when evidentiary use is anticipated.
- Original acquired artifacts remain distinct from OCR, annotations, extracts, crops, or review derivatives.
- A hash proves integrity of the preserved bytes after capture; it does not prove upstream truth, authorship, or legal admissibility.
- Dynamic and volatile content may require video/context capture or repeat acquisition; the record should say what the chosen method could not preserve.
- Where supported, archival exports can include WARC, MHTML, PDF, media files, and a machine-readable manifest; unsupported formats are never represented as captured.