XPScerpto Portal-3
Security
Sovereign cryptographic platform portal
XPScerpto presents a sovereignty-oriented cryptographic platform portal with explicit authority boundaries, evidence-first status reporting, and a separate editorial control plane.
Evidence-first UI
Security
This portal distinguishes the real Python backend from the native C++ runtime. Claims remain gated by evidence and runtime truth checks.
Truth contract
No unproven production claim
production_ready is computed from native runtime attachment plus qualifying evidence; it is not an editorial toggle.
Security & Assurance
Security
XPScerpto presents a sovereignty-oriented cryptographic platform portal with explicit authority boundaries, evidence-first status reporting, and a separate editorial control plane.
Source
Current
Source-tree identity is bound to the release fingerprint.
bbe927e740b50a545a…Package
Current
Package-content identity is bound when a package fingerprint is available.
9fde5c34f40b2f449e…Runtime
Stale
Runtime state follows the most recent composite security verification.
Evidence
Current
Only explicitly public-redacted evidence is projected here.
These limitations are part of the public security posture and are not suppressed.
SAFE_HARBOR_PENDING_LEGAL_REVIEWSafe-harbor language is pending legal review and is not published as an approved protection.RETENTION_POLICY_PENDING_GOVERNANCEThe disclosure retention period is pending governance approval.PROTECTED_EVIDENCE_UPLOAD_DISABLED_FAIL_CLOSEDProtected evidence upload is disabled until scanning and encrypted storage are both available.PGP_CHANNEL_UNCONFIGUREDA managed public PGP disclosure key is not configured.RUNTIME_SECURITY_VERIFICATION_STALEThe most recent composite runtime security verification is stale.
Security Status Overview
Current state of key public security surfaces.
Projection generated 2026-11-11T08:19:29Z
| Security surface | Status | Last verified | Details |
|---|---|---|---|
| Vulnerability reporting | Stale | 2026-09-10T18:23:04Z | Report vulnerability |
| security.txt | Stale | 2026-10-02T19:44:26Z | View security.txt |
| Privileged operations | Stale | 2026-09-10T18:23:04Z | View controls |
| Audit trail | Stale | 2026-09-10T18:23:04Z | View controls |
| Protected evidence upload | Stale | 2026-10-02T19:44:26Z | Report vulnerability |
| Published advisories (0) | Stale | 2026-09-10T18:23:04Z | View advisories |
Security Controls
Public controls and their current verification state.
SEC-AUTH-001Capability-gated security operations
StaleSEC-AUDIT-001Transactional audit receipts
StaleSEC-DISC-001security.txt publication
StaleSEC-EVID-001Protected evidence channel
StaleEvidence Registry
Public-redacted, hash-bound security evidence.
svrn_A7rGvXmS5A7uuJCLDfDSoA4jSECURITY_VERIFICATION_RUN
PARTIALrelease:R32R12_CP009_PACKAGE_RUNTIME_REPAIR_06_DOCS_TEST_PROVENANCE_AND_GOVERNED_ROUTE_INVENTORYSOURCE_IDENTITY
VERIFIEDpackage:R32R12_CP009_PACKAGE_RUNTIME_REPAIR_06_DOCS_TEST_PROVENANCE_AND_GOVERNED_ROUTE_INVENTORYPACKAGE_CONTENT_IDENTITY
VERIFIEDVulnerability Disclosure
Authorized scope and safe reporting boundary.
Authorized testing scope
xpscerpto.eu
Not allowed
- Do not perform denial-of-service, destructive testing, social engineering, phishing or credential attacks.
- Do not test third-party infrastructure or services that XPScerpto does not control.
- Do not exfiltrate, retain, modify or publish personal, confidential or security-restricted data.
Security Advisories
No public security advisories are currently published.
0Published advisories
View advisories Policies & Governance
Current public policy identities and lifecycle state.
SEC-POL-001Vulnerability Disclosure Policy
PENDING_GOVERNANCESEC-POL-002Contributor Security Agreement
ACTIVESEC-POL-003Security Center Governance
PENDING_GOVERNANCEHow XPScerpto proves a security claim
A public claim is permitted only after implementation and evidence pass through explicit verification boundaries.
- 01Control
- 02Implementation
- 03Source identity
- 04Package identity
- 05Runtime verification
- 06Test / Replay
- 07Evidence receipt
- 08Public claim