Todiste: Two-Phone Witness

One moment can look different from one camera. Todiste lets two people who are physically together create a coordinated record from two independent Android phones.

Start a visible witness session on one phone, join it from the second phone on the same local network, and compare the phrase shown on both screens. Todiste measures the clock difference between the devices and schedules both cameras for the same moment.

Each phone records its own photo, timestamp, available sensor context, and key-protection details. It signs its own entry with an Android Keystore key, then signs the entry received from the other phone. The resulting pair is linked to the previous pair through a hash chain.

Todiste reports technical checks behind every result: achieved capture-time deviation, image hashes and file integrity, each phone's signature, reciprocal cross-signatures, append-only pair ordering, bounded 2D scene-geometry comparison, available location, pressure, light, heading, motion, and network-context comparisons, and key protection reported by each Android device.

Save multiple paired captures in one record. The evidence library keeps the two views, check summaries, and derivative history together. Export a portable ZIP bundle or share it with an app you choose. The built-in bundle verifier can open a Todiste ZIP and recheck hashes, signatures, ordering, timing, geometry data, sensor context, and redacted derivatives.

Draw an opaque redaction region to hide a face, plate, or document number before sharing. The original record remains unchanged while the derivative keeps its source hash and its own hash. Records are stored in each phone's app storage until deleted or exported.

Todiste reports technical consistency and integrity checks. It cannot identify who or what a photo depicts, decide why an event happened, or determine whether a record will be accepted by an authority.