ClarioDB Trust Center · 0.9.72

Verifiable security, published limits

Every assurance states its status, source, freshness, and boundary. Missing evidence is never replaced by a promise.

Published posture Items require review

12confirmed proofs 2items to review Ed25519published attestation 2026-09-02T06:57:10Zreport instant

Rapport JSON Public key Security policy security.txt

This report proves

Local, dated, reproducible states

the match between delivered bytes and announced manifests;
the security contracts present in the active release;
the boundaries ClarioDB deliberately publishes.

This report does not prove

The absolute absence of risk

no external certification that has not been obtained;
no immutability against the full host owner;
no periodic restore test that has not been run.

Verifiable continuity

Current evidence is linked to prior evidence

A periodic receipt signs the report and its relationship to the previous receipt. The same chain also anchors the product-journal head.

Sequence#12026-09-02T06:57:10Z

Receipt chainValidsha256:5aef51a7442b596ed…

Key continuityConfirmedroot can be pinned off-host

Anchored product journal17events at latest snapshot

DNS second channelNot configuredoptional · DNSSEC not proven

Evidence changes0 / +0regressions / improvements

Machine status Latest snapshot Transparency ledger Key history Download root pin

To detect full server replacement, a third party must retain the root or an earlier ledger copy. The Trust Center does not claim to create external immutability by itself.

Current posture Items require review

No synthetic score: every state links to evidence, a date, and a boundary.

12Confirmed 2Review 0Critical 0Unknown 2Not covered

Evidence category

Integrity & delivery

Delivered bytes, release registry, and published attestations.

Confirmed AUD-PUB-DEPLOY-001

Checksums Local verification Measured in this report 2026-09-02T06:57:10Z

Published version integrity

Both checksum sets are valid.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "manifest": {
        "ok": 648,
        "total": 648
    },
    "delivery": {
        "ok": 649,
        "total": 649
    },
    "observed_at": "2026-09-02T06:57:10Z",
    "age_seconds": 0,
    "cache_state": "miss"
}

Confirmed AUD-PUB-ATTEST-001

Signature Ed25519 configuration Measured in this report 2026-09-02T06:57:10Z

Public attestation signature

Public reports are signed with Ed25519.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "state": "configured",
    "public_key_base64": "kCXiiVuXa26IB0ANa31767FV2X1yfV6CwjoTjUDmFfo="
}

Not covered AUD-PUB-CERT-001

Declared boundary Published contract Measured in this report 2026-09-02T06:57:10Z

External certifications

No CSA STAR, ISO/IEC 27001, SOC 2/SOC 3 or OWASP certification is currently claimed.

BoundaryThis capability is not covered by the active release.

Confirmed AUD-PUB-RELEASE-RECEIPT-001

Registry System history Measured in this report 2026-09-02T06:57:10Z

Shipped build receipt

A structured build receipt is covered by the current manifest.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "state": "present",
    "covered_by_manifest": true,
    "sha256": "sha256:d47593d0eec5b3ca8b94058cd266264fced87600534c9ecc3c95501119c4c860",
    "boundary": "Self-issued release evidence; it is not an external CI witness."
}

Evidence category

Identity & secrets

Authentication, session, vault, and cryptographic derivation.

4 1 review

Confirmed AUD-PUB-SESSION-001

Local configuration ClarioDB runtime Measured in this report 2026-09-02T06:57:10Z

Temporary secrets isolated from the PHP session

The browser receives only an opaque session identifier and the PHP session retains only an opaque handle. Derived keys and active credentials are encrypted separately in private runtime storage, time-bounded, and removed on logout.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "browser_cookie_contains": "opaque_session_id_only",
    "php_session_contains": "opaque_secret_state_handle_only",
    "encrypted_runtime_contains": [
        "derived_vault_key",
        "active_connection_credentials"
    ],
    "encryption": "libsodium_secretbox"
}

Confirmed AUD-PUB-AUTH-001

Local configuration ClarioDB runtime Measured in this report 2026-09-02T06:57:10Z

Authentication defence

Attempt throttling and single-use TOTP counters are active.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "available": true,
    "ok": true,
    "attempt_guard": true,
    "shared_status": true,
    "totp_single_use": true,
    "auth_max_attempts": 5,
    "auth_window_seconds": 900,
    "totp_max_attempts": 5,
    "totp_window_seconds": 600,
    "evidence_mode": "loaded_runtime"
}

Confirmed AUD-PUB-VAULT-001

Local configuration ClarioDB runtime Measured in this report 2026-09-02T06:57:10Z

Vault and temporary secrets

The current vault uses Argon2id v1m and temporary secrets live in private secretbox runtime storage.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "kdf_profile": {
        "version": "v1m",
        "opslimit": 3,
        "memlimit": 268435456
    },
    "runtime_encryption": "libsodium_secretbox"
}

Review AUD-PUB-RESET-001

Local configuration ClarioDB runtime Measured in this report 2026-09-02T06:57:10Z

Reset tokens

Tokens are random, expire, and are consumed, but are currently stored as bearer secrets in the system database until use or cleanup.

BoundaryThe signal exists but does not alone prove the operational outcome.

Structured evidence

{
    "stored_as_digest": false,
    "tracked_debt": true
}

Evidence category

Transport & HTTP

Direct or Agent connection, cookies, and response policies.

Confirmed AUD-PUB-AGENT-001

Local observation Published contract Measured in this report 2026-09-02T06:57:10Z

Pinned Agent and signed responses

The shipped protocol supports pinned identity, anti-replay and signed attestations.

BoundaryMeasured or derived locally for this report.

Confirmed AUD-PUB-HTTP-001

Local configuration ClarioDB runtime Measured in this report 2026-09-02T06:57:10Z

HTTP perimeter

The expected CSP and framing protections are present.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "available": true,
    "ok": true,
    "site": "site",
    "csp_present": true,
    "missing_directives": [],
    "frame_ancestors": true,
    "script_unsafe_eval": false,
    "script_inline_attributes_blocked": true,
    "cookie": {
        "secure": true,
        "httponly": true,
        "samesite": "Lax"
    },
    "hsts_max_age": 31536000,
    "headers_implementation": true
}

Evidence category

Backup & continuity

Archive keys, scheduling, workers, and verified restoration.

2 1 review

Review AUD-PUB-RESTORE-001

Local observation Published contract Measured in this report 2026-09-02T06:57:10Z

Restoration

ClarioDB provides asynchronous additive restoration with terminal verification. For Direct connections, recent protected archives can resume from an atomic checkpoint; ambiguous Agent outcomes are never replayed. Destructive replacement and automatic periodic restore tests remain uncovered.

BoundaryThe signal exists but does not alone prove the operational outcome.

Structured evidence

{
    "coverage": "additive_async_checkpointed"
}

Confirmed AUD-PUB-BACKUP-001

Local observation Published contract Measured in this report 2026-09-02T06:57:10Z

Independent archive key

Each new encrypted manual backup receives a random CDB1 key independent from the vault passphrase.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "available": true,
    "ok": true,
    "format": "clariodb-archive-credential/1",
    "random_per_backup": true,
    "vault_passphrase_reused": false,
    "email_contains_key": false,
    "evidence_mode": "loaded_runtime"
}

Evidence category

Audit & traceability

Event chain, outcomes, and attributable evidence.

Confirmed AUD-PUB-AUDIT-ANCHOR-001

Local observation Published contract Measured in this report 2026-09-02T06:57:10Z

Product-journal anchoring

The product-journal head is valid and will be included in the next public receipt.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "exists": true,
    "valid": true,
    "entries": 17,
    "head_hash": "sha256:eab7545e5d7e6a253462aec9183c0b23df203f8ec6bab85959c268bce08b52f4",
    "issues": []
}

Evidence category

Database & model

Metadata, row identity, relationships, and storage.

Confirmed AUD-PUB-KEY-CONTINUITY-001

Local observation Published contract Measured in this report 2026-09-02T06:57:10Z

Public-key continuity

The current Ed25519 key matches the pinned root or a valid cross-signed rotation.

BoundaryMeasured or derived locally for this report.

Structured evidence

{
    "state": "genesis",
    "ok": true,
    "configured_key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
    "pinned_key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
    "genesis_key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
    "rotation_sequence": 0,
    "issues": [],
    "first_seen_at": "2026-09-02T06:57:10Z",
    "current_since": "2026-09-02T06:57:10Z",
    "state_sha256": "sha256:abc963827f0adaf559120184adf96c81c36217bb1a2223a52795062668d928dd",
    "state_signature_format": "clariodb-trust-key-continuity-state-signature/1",
    "root_pin_sha256": "sha256:3ad76c6529476a155aa1e9416b77696035d00c11c44a386156287dd0c8005011"
}

Evidence category

Boundaries & coverage

Missing capabilities, unclaimed certifications, and published boundaries.

Confirmed AUD-PUB-RETRY-001

Local observation Published contract Measured in this report 2026-09-02T06:57:10Z

No blind retry after ambiguous mutation

Mutation paths classify ambiguous outcomes and prevent automatic replay.

BoundaryMeasured or derived locally for this report.

Not applicable AUD-PUB-TRANSPARENCY-001

Declared boundary Published contract Measured in this report 2026-09-02T06:57:10Z

Public transparency ledger

This report initialises or extends the public chain.

BoundaryThis control does not apply to the current context.

Structured evidence

{
    "entries": 0,
    "head_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
    "age_seconds": null,
    "stale": true,
    "issues": [],
    "intended_snapshot": {
        "sequence": 1,
        "previous_record_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
        "interval_seconds": 900,
        "stale_after_seconds": 3600
    }
}

Not applicable AUD-PUB-LEDGER-CHECKPOINT-001

Declared boundary Published contract Measured in this report 2026-09-02T06:57:10Z

Signed ledger checkpoint

The first checkpoint will be published with the first receipt.

BoundaryThis control does not apply to the current context.

Structured evidence

{
    "state": "not_applicable",
    "issues": []
}

Not covered AUD-PUB-DNS-PIN-001

Declared boundary Published contract Measured in this report 2026-09-02T06:57:10Z

DNS key pinning

No independent DNS pin is configured.

BoundaryThis capability is not covered by the active release.

Structured evidence

{
    "state": "not_configured",
    "ok": false,
    "required": false,
    "name": null,
    "expected_value": "v=clariodb-trust1; key-id=ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
    "observed_values": [],
    "observed_at": null,
    "age_seconds": null,
    "source": "configuration",
    "dnssec_validated": false,
    "boundary": "No DNS observation is configured."
}

Reproducibility

Verify the report outside ClarioDB

SHA-256 proves document integrity. An Ed25519 signature also proves the document was signed by the published key; that key identity must be pinned independently.

Download the report
Download the public key
php bin/clariodb-trust-verify.php report.json --key=trust-key.json

Report SHA: sha256:0a666a41e310559ea4a73d0559a0095c944233d056afec92f2759876d9a1bebb
Key ID: ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692

External frameworks

Certifications and permitted wording

No CSA STAR, ISO/IEC 27001, SOC 2/SOC 3, or OWASP certification is currently claimed. The roadmap and permitted wording are documented without presenting them as obtained.

Open the reference document

Model boundary

Tamper evidence, not absolute immutability

The product journal is hash-chained and detects tampering within the application model. It does not claim immutability against a system administrator controlling the entire host.