Bundle Generation
Deterministic proof package output with policy bindings.
PQC Migration Digital Twin
Operational Dashboard
Inventory
Cryptographic asset baseline
| System | Algorithm | Owner | Status |
|---|---|---|---|
| Root CA Issuance | RSA-2048 | PKI Ops | AMBER |
| Edge Firmware Signing | ECDSA-P256 | Device Security | RED |
| Long-Term Archive | AES-256 + RSA-OAEP | Data Platform | GREEN |
HNDL Heatmap
Signal intensity snapshot
H85%
N54%
D71%
L29%
Risk Matrix
Likelihood x Impact
9
Harvest-Now Decrypt-Later
6
Vendor PQC Readiness Lag
6
Unmanaged Key Sprawl
Proof Panel
Evidence and verification lanes
Verifier Lane
Independent verifier checks with signed result records.
Audit Linkage
Traceability from request through verification and retention.
Governance
Exception register and verifier drift
| Exception ID | Control | Status | Owner | Expiry |
|---|---|---|---|---|
| EX-2026-014 | Long-Term Archive | Mitigating | Data Platform | 2026-09-30 |
| EX-2026-019 | Firmware Signing | Open | Device Security | 2026-08-15 |
proof-verifier
Current: 1.3.1
Latest: 1.4.0
risk-audit-verifier
Current: 2.0.0
Latest: 2.0.0