Public Trust Center
Verifiable status of public controls
The Trust Center distinguishes implemented public-web controls, architectural objectives, and controls requiring independent assurance on the actual deployment.
| Area | Status | Public evidence | Note |
|---|---|---|---|
| Security headers | Implemented | Server release configuration | Must be re-verified on the live domain because server behavior controls final delivery. |
| Release integrity | Implemented | Manifest · SHA-256 | Release-artifact integrity evidence. |
| security.txt | Implemented | Open | Public security-disclosure channel. |
| Evidence / replay / deterministic-first controls | Architecture objective | Architecture documentation | Design presence is not independent certification of a deployment. |
| Independent security assessment | Independent validation required | Not yet claimed | Status changes only after actual verification. |