evidence explorer
Browse the evidence. Verify it yourself.
Every claim, protocol, signed audit cycle and finding Quox publishes, in one list. Each carries a passport: what it says, who issued it, what it cannot establish. Press Verify and your browser recomputes the signature. No account, no server trust.
the counts, as published
127 items, and what they are.
These are the index’s own counts, recomputable from the list below.
Click a count to filter the list below.
Machine access
The same data this page is built from, no account needed.
- index.json the whole catalog (quox.evidence.index/1)
- feed.jsonl one item per line
- api.quox.ai/api/evidence filterable query API
Each item’s own file lives at /evidence/items/<id>.json; its passport links to it.
Read this before you trust a green tick
- Authentic is not correct. A valid signature or a recomputed hash proves a record is authentic and unmodified. It does not prove the system behaved correctly or that a finding list is complete.
- Self-attested is not independent. Quox-issued records are checkable by anyone, but no third party has audited them. External records are issued or hosted by someone else.
- Owner-approved is not computed. It means the owner approved the wording for publication. It is not a computed VERIFIED status.
- A hash is a commitment, not proof of what the withheld material contains. Counts stay honest even where detail is withheld.
the evidence passports
Open an item to see its passport.
Showing 127 of 127
Claims 6
Claimquoxproof is published on PyPI with build provenance an outside party can trace to its source repository and commit.
- Status note
- Owner-approved wording for publication. This is owner-curated, not a computed VERIFIED status.
- Source of the record
- Primary record is issued or hosted by PyPI, outside Quox.
- Limitations
- PyPI provenance attests where the artifact was built from (repository and commit); it is not an independent audit of what the code does.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. PyPI attests where the artifact was built from; it is not an audit of what the code does.
- Open findings
- 0 referenced
- First published 2026-09-28
- Review by 2026-12-27
- Fresh
Reproduce it yourself
Inspect the PEP 740 provenance attestation PyPI generated via Trusted Publishing (https://pypi.org/integrity/quoxproof/0.2.0/ , per-file provenance returns HTTP 200). PyPI, not Quox, binds the published artifact to the GitHub repository and commit it was built from.
ClaimEvery crawl of every site Quox runs is captured as a signed, hash-chained WARD receipt that a reader can recompute offline without trusting Quox.
- Status note
- Owner-approved wording for publication. This is owner-curated, not a computed VERIFIED status.
- Source of the record
- Issued by Quox; the reader recomputes it offline from published material. Not audited by a third party.
- Limitations
- The receipts are issued by Quox; the independence is that the reader recomputes them offline, not that a third party issued or audited them.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The receipts are issued by Quox; the independence is only that you recompute them offline.
- Open findings
- 0 referenced
- First published 2026-09-28
- Review by 2026-10-28
- Fresh
Reproduce it yourself
Download the bundle and run: node recompute-chain.mjs <site>-chain.json quox-seo-pubkey.pem . It recomputes every entry's hash chain and verifies the Ed25519 tip signatures offline, with no call back to Quox.
ClaimQuox runs governed security scans against its own production surface and publishes the findings, both fixed and still open.
- Status note
- Owner-approved wording for publication. This is owner-curated, not a computed VERIFIED status.
- Source of the record
- Issued by Quox; not independently verified.
- Limitations
- This is Quox auditing Quox. An independent third-party security audit is a stated next step, not yet done.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. This is Quox auditing Quox; the signed log proves what was published, not that the audit found everything.
- Open findings
- 2 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-09-28
- Review by 2026-10-28
- Fresh
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
ClaimQuox continuously witnesses the health of its own evidence chain, and that self-witnessing check is itself machine-proven on the proof matrix.
- Status note
- Owner-approved for publication. Computed status VERIFIED comes from proof-engine runs and is reported separately in computed_status.
- Source of the record
- Issued by Quox; not independently verified.
- Limitations
- Proven on our own dev box and clean throwaway VMs, not yet on a third-party-operated install.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The status was computed from Quox's own proof-engine runs on Quox's own installs; it is not a third-party test.
- Open findings
- 0 referenced
- First published 2026-10-17
- Review by 2026-11-16
- Fresh
Evidence it points to
Reproduce it yourself
Fetch /facts.json and /facts.receipt.json. sha256(facts.json bytes) must equal receipt.facts_sha256 and ward_entry.payload_hash. Recompute ward_entry.chain_hash per WARD SPEC section 4.4 (canonical JSON of the ten hash-body fields). Verify ward_tip.sig is an Ed25519 signature over the raw bytes of ward_tip.tip_chain_hash by receipt.public_key. Then confirm the item exists in facts.json at the locator with the same claim_id. A match proves the record is unmodified since witnessing, not that the claim is correct.
ClaimQuox's secret vault reports its own health as a machine-proven check; an earlier regression was caught red on the matrix and fixed.
- Status note
- Owner-approved for publication. Computed status VERIFIED comes from proof-engine runs and is reported separately in computed_status.
- Source of the record
- Issued by Quox; not independently verified.
- Limitations
- Proven on our dev install only; the earlier failure is preserved in the status history, not erased.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The status was computed from Quox's own proof-engine runs on Quox's own installs; it is not a third-party test.
- Open findings
- 0 referenced
- First published 2026-10-17
- Review by 2026-11-16
- Fresh
Evidence it points to
Reproduce it yourself
Fetch /facts.json and /facts.receipt.json. sha256(facts.json bytes) must equal receipt.facts_sha256 and ward_entry.payload_hash. Recompute ward_entry.chain_hash per WARD SPEC section 4.4 (canonical JSON of the ten hash-body fields). Verify ward_tip.sig is an Ed25519 signature over the raw bytes of ward_tip.tip_chain_hash by receipt.public_key. Then confirm the item exists in facts.json at the locator with the same claim_id. A match proves the record is unmodified since witnessing, not that the claim is correct.
ClaimQuox searches your files on a running install. It is proven on our dev install and is not yet proven on fresh clean-VM installs, where it currently fails.
- Status note
- Owner-approved for publication. Computed status REVIEW comes from proof-engine runs and is reported separately in computed_status.
- Source of the record
- Issued by Quox; not independently verified.
- Limitations
- Proven on our dev install only; currently fails on fresh clean-VM installs.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The status was computed from Quox's own proof-engine runs on Quox's own installs; it is not a third-party test.
- Open findings
- 0 referenced
- First published 2026-10-17
- Review by 2026-11-16
- Fresh
Evidence it points to
Reproduce it yourself
Fetch /facts.json and /facts.receipt.json. sha256(facts.json bytes) must equal receipt.facts_sha256 and ward_entry.payload_hash. Recompute ward_entry.chain_hash per WARD SPEC section 4.4 (canonical JSON of the ten hash-body fields). Verify ward_tip.sig is an Ed25519 signature over the raw bytes of ward_tip.tip_chain_hash by receipt.public_key. Then confirm the item exists in facts.json at the locator with the same claim_id. A match proves the record is unmodified since witnessing, not that the claim is correct.
Protocols 4
ProtocolAEE is a live IETF Internet-Draft (individual submission), not a standard: draft-cowles-aee-01, current through 2027-03-04.
- Not claimed
- Not an IETF standard, and not IETF review or endorsement.
- Status note
- Owner-approved wording for publication. This is owner-curated, not a computed VERIFIED status.
- Source of the record
- Issued by Quox (primary source: IETF); not independently verified.
- Limitations
- An Internet-Draft is an individual submission hosted by the IETF, not IETF review or endorsement.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The primary record is the IETF Datatracker entry, checked at that source; no Quox signature is involved in that check. An Internet-Draft is an individual submission, not a standard.
- Open findings
- 0 referenced
- First published 2026-09-28
- Review by 2027-03-27
- Fresh
Evidence it points to
Reproduce it yourself
Fetch the draft from the IETF Datatracker at the url above and confirm draft-cowles-aee exists at the stated revision.
ProtocolAOCL is a live IETF Internet-Draft (individual submission), not a standard: draft-cowles-aocl-01, current through 2027-03-04.
- Not claimed
- Not an IETF standard, and not IETF review or endorsement.
- Status note
- Owner-approved wording for publication. This is owner-curated, not a computed VERIFIED status.
- Source of the record
- Issued by Quox (primary source: IETF); not independently verified.
- Limitations
- An Internet-Draft is an individual submission hosted by the IETF, not IETF review or endorsement.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The primary record is the IETF Datatracker entry, checked at that source; no Quox signature is involved in that check. An Internet-Draft is an individual submission, not a standard.
- Open findings
- 0 referenced
- First published 2026-09-28
- Review by 2027-03-27
- Fresh
Evidence it points to
Reproduce it yourself
Fetch the draft from the IETF Datatracker at the url above and confirm draft-cowles-aocl exists at the stated revision.
ProtocolVOLT is a live IETF Internet-Draft (individual submission), not a standard: draft-cowles-volt-01, current through 2027-03-04.
- Not claimed
- Not an IETF standard, and not IETF review or endorsement.
- Status note
- Owner-approved wording for publication. This is owner-curated, not a computed VERIFIED status.
- Source of the record
- Issued by Quox (primary source: IETF); not independently verified.
- Limitations
- An Internet-Draft is an individual submission hosted by the IETF, not IETF review or endorsement.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The primary record is the IETF Datatracker entry, checked at that source; no Quox signature is involved in that check. An Internet-Draft is an individual submission, not a standard.
- Open findings
- 0 referenced
- First published 2026-09-28
- Review by 2027-03-27
- Fresh
Evidence it points to
Reproduce it yourself
Fetch the draft from the IETF Datatracker at the url above and confirm draft-cowles-volt exists at the stated revision.
ProtocolWARD is a live IETF Internet-Draft (individual submission), not a standard: draft-cowles-ward-00, current through 2027-03-04.
- Not claimed
- Not an IETF standard, and not IETF review or endorsement.
- Status note
- Owner-approved wording for publication. This is owner-curated, not a computed VERIFIED status.
- Source of the record
- Issued by Quox (primary source: IETF); not independently verified.
- Limitations
- An Internet-Draft is an individual submission hosted by the IETF, not IETF review or endorsement.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The primary record is the IETF Datatracker entry, checked at that source; no Quox signature is involved in that check. An Internet-Draft is an individual submission, not a standard.
- Open findings
- 0 referenced
- First published 2026-09-28
- Review by 2027-03-27
- Fresh
Evidence it points to
Reproduce it yourself
Fetch the draft from the IETF Datatracker at the url above and confirm draft-cowles-ward exists at the stated revision.
Artifacts 2
ArtifactThe signed log of Quox's published security audit cycles and findings (schema quox.security-audit-log.v1).
- Not claimed
- Not a complete list of every issue that exists, and not a third-party audit.
- Status note
- 14 cycle(s), 101 finding(s); one Ed25519 signature covers the whole canonicalized log.
- Source of the record
- Signed by the Quox publisher key; anyone can verify it offline, no third party has audited it.
- Limitations
- Authenticity of the publisher key rests on the committed public key; the log lists allowlisted fields only.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the log is complete or that the findings are correctly graded.
- First published 2026-09-19
- Latest 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
ArtifactThe public machine-readable facts file (facts.json), witnessed in a WARD chain with an offline-verifiable receipt.
- Not claimed
- Not a claim that every statement inside it is independently verified; each claim carries its own status.
- Status note
- 28 claim(s) indexed in the registry; only owner-approved evidence is attached.
- Source of the record
- Witnessed by a Quox-held WARD signer; external corroboration (TSA token, public git history) is named in facts.json witness block.
- Limitations
- The receipt embeds its own signing key; out-of-band witnesses (RFC-3161 token, public git history) corroborate it.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the claims listed inside facts.json are true.
- First published 2026-10-23
Evidence it points to
Reproduce it yourself
Fetch /facts.json and /facts.receipt.json. sha256(facts.json bytes) must equal receipt.facts_sha256 and ward_entry.payload_hash. Recompute ward_entry.chain_hash per WARD SPEC section 4.4 (canonical JSON of the ten hash-body fields). Verify ward_tip.sig is an Ed25519 signature over the raw bytes of ward_tip.tip_chain_hash by receipt.public_key. Then confirm the item exists in facts.json at the locator with the same claim_id. A match proves the record is unmodified since witnessing, not that the claim is correct.
Signed audit cycles 14
Signed cycletrust-proof-self-audit-c119 findings: 15 fixed, 4 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 19 published finding(s); 4 open, 15 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- Quox auditing Quox. Not an independent third-party audit; findings carry allowlisted fields only.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 4 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-09-19
- Latest 2026-09-20
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cycletrust-proof-self-audit-c29 findings: 9 fixed, 0 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 9 published finding(s); 0 open, 9 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- Quox auditing Quox. Not an independent third-party audit; findings carry allowlisted fields only.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 0 referenced
- First published 2026-09-24
- Latest 2026-09-25
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cycletrust-proof-self-audit-c314 findings: 13 fixed, 1 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 14 published finding(s); 1 open, 13 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- Quox auditing Quox. Not an independent third-party audit; findings carry allowlisted fields only.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 1 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-09-25
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cycletrust-proof-quoxtrust-conformance-c17 findings: 7 fixed, 0 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 7 published finding(s); 0 open, 7 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- Quox auditing Quox. Not an independent third-party audit; findings carry allowlisted fields only.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 0 referenced
- First published 2026-09-26
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cycleGoverned discovery on real deployments (2026-09)3 findings: 0 fixed, 3 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 3 published finding(s); 3 open, 0 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- Customer identities are redacted; the receipts, scope and severities are not. Quox tested these sites under proof of control; this is not an independent audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 3 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-09-26
- Latest 2026-09-27
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1, Release Gate (verdict PASS)33 findings: 30 fixed, 3 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 33 published finding(s); 3 open, 30 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 3 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-09-30
- Latest 2026-10-01
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.2, Complete Mediation (verdict PASS)4 findings: 4 fixed, 0 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 4 published finding(s); 0 open, 4 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 0 referenced
- First published 2026-10-01
- Latest 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.3, Resilience (verdict PASS)1 findings: 1 fixed, 0 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 1 published finding(s); 0 open, 1 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 0 referenced
- First published 2026-10-01
- Latest 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.1, Parity & Repeatability (verdict PASS)2 findings: 1 fixed, 1 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 2 published finding(s); 1 open, 1 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 1 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.4, Confidentiality & Supply-chain (verdict PASS)3 findings: 2 fixed, 1 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 3 published finding(s); 1 open, 2 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 1 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.5, Injection / Containment (verdict PASS)1 findings: 1 fixed, 0 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 1 published finding(s); 0 open, 1 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 0 referenced
- First published 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.6, Evidence Tamper-Evidence (verdict PASS)1 findings: 0 fixed, 1 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 1 published finding(s); 1 open, 0 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 1 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.7, Authorization Depth (verdict PASS)1 findings: 0 fixed, 1 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 1 published finding(s); 1 open, 0 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 1 referenced (filter Kind: Findings, Status: Open to read them)
- First published 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
Signed cyclev1.8, Resource & Abuse Bounds (verdict PASS)3 findings: 3 fixed, 0 open
- Not claimed
- Not an independent third-party audit, and not a claim that no other issues exist.
- Status note
- 3 published finding(s); 0 open, 3 fixed at publication.
- Source of the record
- Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party.
- Limitations
- A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.
- Cannot establish
- A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.
- Open findings
- 0 referenced
- First published 2026-10-02
Evidence it points to
Reproduce it yourself
Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.
node quoxtrust-verify.mjs ./securityAudits.jsonPublic key (raw Ed25519, non-secret): fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=
for machines and for going deeper
Same data, other doors.
Agents and scripts can read the exact data on this page with no account (see Machine access above).
- Verify it yourselfpaste-and-verify, offline verifier
- The scoreboardthe published trust bars
- The claim registryevery public claim, with its evidence
- The evidence wikihow this is built and what it proves