Compliance Glossary for Confluence

What is the baseline root hash?

The baseline root hash is a SHA-256 fingerprint of an enterprise freeze. At promotion, the app hashes the baseline ID with the sorted roots of every stored evidence chunk. Each chunk root covers the captured terms, page revisions, usages, findings, and membership in that chunk. Run verification rechecks every chunk against its recorded checksum and root. A match does not prove the source was correct.

Last verified against production v6 · 24 October 2026

At a glance

InputActionOutputLimit
Captured terms, page revisions, usages, findings, and membershipCanonicalize and hash each persisted chunkA deterministic chunk rootThe root represents canonical record material, not the source content itself.
Baseline ID and completed chunk rootsSort the chunk roots and hash the aggregate at promotionThe enterprise baseline root hashA changed chunk root changes the aggregate.
Stored chunk bytesRun verification recalculates their SHA-256Match, or corruption against the recorded checksumThe workspace shows a summary sentence, not the hash values.
Stored chunk contentRun verification recomputes the chunk rootMatch, or drift when the root was not recordedVerification checks chunks one by one. It does not display the aggregate root.
Ordered archive section proofsHash the section proofs under the baseline identityA separate archive source snapshot hashThe archive hash and the baseline root hash are different controls.

How it works

  1. Open Terminology Baseline and find Enterprise evidence workspace. It opens the current enterprise freeze.
  2. Inspect Frozen meanings and revisions. Review each visible SHA-256 and Availability value.
  3. A term without a source page shows "Integrity: in the frozen chunk hash and baseline root hash".
  4. Select Run verification.
  5. Read the summary sentence and any Coverage blockers. A non-matching chunk is never reported as conformant.

Example

A freeze has three stored chunks. One chunk is rewritten in storage after promotion. Its bytes no longer match the recorded checksum, and its content root is no longer in the recorded list. Run verification reports the chunk as corruption and the freeze as nonconformant.

What this does not mean

The root hash is not a certificate, signature, timestamp authority, or legal WORM guarantee. It does not prove authorship or regulatory sufficiency. It does not reveal which business fact is correct. The workspace does not display the root hash value. The archive source snapshot hash serves a different purpose and must remain separate.

Related questions

Next step

Evaluate a small enterprise freeze. Run verification and review the summary together with coverage blockers. View Compliance Glossary on Atlassian Marketplace.

View on Atlassian Marketplace
Verification basis: production v6 code, tests, manifest, and operations guidance. Verified 24 October 2026.