{
  "$purpose": "The current-state registry of Proofpane's load-bearing public claims: what is claimed, where it is stated, on what evidence basis, and when that basis was last verified. If you are evaluating a specific claim — human or AI — start here rather than reconstructing it from prose. Basis vocabulary is the same one the deploy-time public-claim gate enforces: artifact / test / external / audit / founder-attested, where founder-attested is legitimate and permanently marked as the weaker kind.",
  "$relation_to_evidence_packs": "This file is CURRENT STATE, maintained on the site. The per-publish decisions (which claim went live, on what basis, under which signature) land on the hash-chained audit log and export inside Evidence Packs as public_claims/claims.json — same name, different object: that one is history you can verify offline, this one is the standing catalogue.",
  "$maintenance": "Guarded by backend/tests/test_claims_registry.py: every current claim's anchor must appear on its cited surface, every artifact basis must exist in the repo, every test basis must name a real test file. A claim removed from the site cannot silently stay 'current' here. Staleness is data (verified_at), not a CI time-bomb — consumers judge age; the guard checks structure and existence.",
  "updated": "2026-08-08",
  "basis_kinds": [
    "artifact",
    "test",
    "external",
    "audit",
    "founder-attested"
  ],
  "claims": [
    {
      "id": "macos-code-signing",
      "statement": "The current distributed Proofpane daemon, v1.5.22, is signed on both macOS architectures with the Developer ID Application certificate issued to PROOFPANE LIMITED (team B94QM75QNG) and notarised by Apple. A bare executable cannot be stapled; Apple's assessment resolves its notarisation ticket online when it runs. The protected script installer invokes that assessment before installation. Windows is not Authenticode-signed; Linux carries published SHA-256 digests rather than a platform-signing claim.",
      "surfaces": [
        {
          "file": "landing/trust/index.html",
          "anchor": "current distributed macOS daemon is done"
        },
        {
          "file": "landing/install/index.html",
          "anchor": "current distributed release is signed and notarised"
        },
        {
          "file": "landing/llms-full.txt",
          "anchor": "current distributed daemon v1.5.22"
        },
        {
          "file": "landing/llms.txt",
          "anchor": "current distributed daemon v1.5.22"
        },
        {
          "file": "landing/index.html",
          "anchor": "current distributed macOS daemon, v1.5.22"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "landing/releases.json"
        },
        {
          "kind": "test",
          "ref": "tests/test_no_unconditional_resign.py"
        }
      ],
      "verified_at": "2026-08-07",
      "verified_how": "Not from a build log. Both v1.5.22 macOS binaries in the distributed channel were interrogated after assembly: codesign -dv --verbose=4 names PROOFPANE LIMITED and team B94QM75QNG; spctl -a -vvv -t install returns 'accepted / source=Notarized Developer ID'; their SHA-256 values match this release record and the served sidecars. Anyone can download the same bytes and repeat those checks.",
      "status": "current"
    },
    {
      "id": "macos-tray-private-prerelease",
      "statement": "Proofpane Tray v0.3.7 was published as a prerelease in the private GitHub repository on 2026-08-07; it requires authenticated repository access and is not anonymously publicly downloadable. Its universal macOS DMG is signed with Developer ID Application: PROOFPANE LIMITED (team B94QM75QNG), Apple-notarised and stapled; the canonical release record carries its SHA-256 digest. The Windows MSI is not Authenticode-signed, and the Linux assets carry SHA-256 digests without a platform-signing claim.",
      "surfaces": [
        {
          "file": "landing/releases.json",
          "anchor": "https://github.com/lywinged/proofpane/releases/tag/tray-v0.3.7"
        },
        {
          "file": "landing/trust/index.html",
          "anchor": "Private-repository tray prerelease: signed and notarised."
        },
        {
          "file": "landing/install/index.html",
          "anchor": "published prerelease inside the private source repository"
        },
        {
          "file": "landing/llms.txt",
          "anchor": "Private-repository tray prerelease v0.3.7 has a signed/notarised/stapled universal disk image"
        },
        {
          "file": "landing/llms-full.txt",
          "anchor": "Private-repository tray prerelease v0.3.7 has a signed/notarised/stapled universal disk image"
        },
        {
          "file": "landing/index.html",
          "anchor": "private-repository macOS tray prerelease v0.3.7 carries a signed, notarised and stapled universal disk image"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "landing/releases.json"
        },
        {
          "kind": "test",
          "ref": "tests/test_public_signing_posture.py::test_private_tray_prerelease_carries_artifact_evidence"
        },
        {
          "kind": "founder-attested",
          "ref": "The tray-v0.3.7 assets were retrieved through authenticated access to the private GitHub repository; anonymous access returns no public release page, which is why this is not recorded as public distribution."
        }
      ],
      "verified_at": "2026-08-07",
      "verified_how": "The tray-v0.3.7 DMG was downloaded through authenticated access after publication. codesign identified PROOFPANE LIMITED and team B94QM75QNG; xcrun stapler validate confirmed the embedded ticket; spctl --type open --context context:primary-signature accepted it as Notarized Developer ID; its SHA-256 digest is 9f8624820c7f61a1cccd5bd8d28958db7985f07fda600417055da12dd33c0502. The successful build workflow head was 927e15d9d38ed61ee0b9b657614e203820626135 while the release tag points to 4446304bb98c686f1da78d76d550668cdd796f1f; the canonical record preserves both instead of claiming they are the same provenance fact.",
      "status": "current"
    },
    {
      "id": "macos-desktop-ci-signing",
      "statement": "The macOS desktop CI artifact desktop-macos-latest (artifact 8990063389 from workflow run 31168310848 at head 927e15d9d38ed61ee0b9b657614e203820626135) has been Developer ID-signed, Apple-notarised and artifact-verified; its universal DMG is stapled and has SHA-256 f865138a5bd7067ed27250b6068efc8b12463a82e0ee1e97ba8cd29c4a3665ee. This is a verified private CI build result, not a public-release claim: no post-certificate public desktop release is recorded in the canonical release index.",
      "surfaces": [
        {
          "file": "landing/releases.json",
          "anchor": "desktop-macos-latest"
        },
        {
          "file": "landing/trust/index.html",
          "anchor": "Desktop CI build: verified, not presented as a public release."
        },
        {
          "file": "landing/install/index.html",
          "anchor": "A separate desktop CI"
        },
        {
          "file": "landing/llms.txt",
          "anchor": "a separate desktop CI build was likewise verified"
        },
        {
          "file": "landing/llms-full.txt",
          "anchor": "a separate desktop CI build was likewise verified"
        },
        {
          "file": "landing/index.html",
          "anchor": "A separate signed/notarised desktop CI build has been verified."
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "landing/releases.json"
        },
        {
          "kind": "artifact",
          "ref": ".github/workflows/apple-signing-note.md"
        },
        {
          "kind": "artifact",
          "ref": ".github/workflows/desktop-release.yml"
        },
        {
          "kind": "test",
          "ref": "tests/test_public_signing_posture.py::test_private_desktop_ci_build_carries_artifact_evidence"
        },
        {
          "kind": "founder-attested",
          "ref": "The 2026-08-07 desktop CI artifacts were downloaded and interrogated with codesign, stapler and spctl; the absence of a post-certificate public desktop release is separately visible in landing/releases.json."
        }
      ],
      "verified_at": "2026-08-07",
      "verified_how": "The desktop-macos-latest artifact (8990063389) was downloaded from successful workflow run 31168310848. Its Proofpane_0.1.0_universal.dmg hashes to f865138a5bd7067ed27250b6068efc8b12463a82e0ee1e97ba8cd29c4a3665ee; codesign names PROOFPANE LIMITED and team B94QM75QNG, xcrun stapler validate confirms the embedded ticket, and spctl --type open --context context:primary-signature accepts it as Notarized Developer ID. The claim remains limited to a private CI artifact, not anonymous public distribution.",
      "status": "current"
    },
    {
      "id": "external-checks-not-independent-assessment",
      "statement": "Proofpane has multiple external checks and signals: Apple notarisation of the current distributed macOS daemon, an authenticated Tray v0.3.7 prerelease artifact from the private repository, and desktop-macos-latest artifact 8990063389 from workflow run 31168310848; dependency intelligence from PyPA/GitHub/RustSec; independently maintained Semgrep/Bandit/gitleaks rules; and community directory review. These are not an independent security assessment; no third-party penetration test, red team, bug bounty or review by a named assessor has been completed.",
      "surfaces": [
        {
          "file": "landing/trust/index.html",
          "anchor": "Assurance status, at a glance"
        },
        {
          "file": "landing/llms.txt",
          "anchor": "Assurance status, precisely"
        },
        {
          "file": "landing/llms-full.txt",
          "anchor": "Assurance status, precisely"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": ".github/workflows/security.yml"
        },
        {
          "kind": "artifact",
          "ref": ".github/workflows/apple-signing-note.md"
        },
        {
          "kind": "founder-attested",
          "ref": "No assessor engagement, penetration-test report, red-team exercise or bug-bounty programme exists as of 2026-08-08; this is an absence disclosed by the company, not an independently provable positive result."
        }
      ],
      "verified_at": "2026-08-08",
      "verified_how": "Separated evidence by who controls the verdict. Apple decides notarisation; advisory databases and rulesets are external but Proofpane runs the tools; directory maintainers decide whether to merge a listing. None supplies the scoped adversarial engagement and named report that would justify an independent-security-assessment claim.",
      "status": "current"
    },
    {
      "id": "compliance-controls-335",
      "statement": "Proofpane pre-maps 335 controls across NIST AI RMF, ISO 42001, EU AI Act, GDPR and SOC 2 (72 / 86 / 113 / 26 / 38).",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "pre-maps 335 controls"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "backend/ai_gov_pack/compliance_frameworks.json"
        },
        {
          "kind": "test",
          "ref": "tests/test_public_claim_control_count.py"
        }
      ],
      "verified_at": "2026-08-04",
      "verified_how": "Counted the controls arrays per framework in the artifact: 72+86+113+26+38 = 335.",
      "status": "current"
    },
    {
      "id": "audit-chain-append-only",
      "statement": "The audit log is hash-chained and append-only at the database level (immutability trigger), with Ed25519 chain-head anchoring.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "hash-chained and append-only"
        }
      ],
      "bases": [
        {
          "kind": "test",
          "ref": "tests/test_audit_append_only.py"
        },
        {
          "kind": "artifact",
          "ref": "backend/app/services/audit_log_service.py"
        }
      ],
      "verified_at": "2026-08-03",
      "verified_how": "The test forbids any UPDATE/DELETE path against audit_log and runs in CI on every pull request.",
      "status": "current"
    },
    {
      "id": "evidence-pack-offline-verifiable",
      "statement": "A sample Evidence Pack and its standalone offline verifier are public; anyone can verify the mechanism with no Proofpane account.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "before ever talking to us"
        }
      ],
      "bases": [
        {
          "kind": "external",
          "ref": "https://proofpane.com/evidence/sample-pack/"
        },
        {
          "kind": "artifact",
          "ref": "tools/verify_evidence_pack.py"
        },
        {
          "kind": "test",
          "ref": "tests/test_evidence_pack_verifies_standalone.py"
        }
      ],
      "verified_at": "2026-08-03",
      "verified_how": "The verifier ships in this repository; the pack and an out-of-band signing key are served at the URL and mirrored on GitHub for sandboxed agents.",
      "status": "current"
    },
    {
      "id": "scale-1800-governed-calls",
      "statement": "Sustained ~1,800 governed calls/second across three nodes with the audit chain still verify-valid under concurrent load.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "1,800 governed calls/second"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "docs/perf/2026-06-26-multi-config-current-tech-ceilings.md"
        }
      ],
      "verified_at": "2026-06-26",
      "verified_how": "Measured on the multi-machine rig; configuration, method and raw numbers are in the artifact, including the degraded peaks the headline deliberately does not use.",
      "status": "current"
    },
    {
      "id": "r2-tier-independently-proven",
      "statement": "A credential classifies as hardware-backed only when its attestation verifies AND resolves in the FIDO Metadata Service AND chains to a certified root — strict enough to reject an emulated TPM; everything else is labelled WebAuthn-backed.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "strict enough to reject an emulated TPM"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "docs/evidence/2026-07-27-l2-device-tier-table.md"
        }
      ],
      "verified_at": "2026-07-27",
      "verified_how": "Measured rows on real devices: a certified FIDO2 key lands hardware-backed, a laptop Secure Enclave credential lands WebAuthn-backed; a public single-file probe lets anyone generate their own row.",
      "status": "current"
    },
    {
      "id": "r3dev-verbatim-text",
      "statement": "In the R3-dev ceremony the chain holds the exact text the operator read on the device display — verbatim, not a hash; that the text was RENDERED is not cryptographically proven and rests on photographs, the operator's account, and the app's refusal to sign what it cannot render.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "the chain holds the exact text he read"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "docs/evidence/media/2026-07-28-l3-ledger/README.md"
        }
      ],
      "verified_at": "2026-07-28",
      "verified_how": "Production run against app.proofpane.com with the device frames photographed; the artifact states what the photographs do and do not establish.",
      "status": "current"
    },
    {
      "id": "bolos-endorsement-refused",
      "statement": "The software route to proving WHICH app signed on a customer's own device was tried and is closed: BOLOS endorsement refuses a side-loaded self-signed app (SW=6F01).",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "SW=6F01, measured on hardware 2026-07-29"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "docs/plans/2026-07-27-proofkey-l3-trust-establishment.md"
        }
      ],
      "verified_at": "2026-07-29",
      "verified_how": "Measured on a Nano S Plus; the dated trust-establishment record carries the attempt and the refusal code.",
      "status": "current"
    },
    {
      "id": "daemon-1519-released",
      "statement": "Fleet binaries carrying the Claude Code hook packaging fixes were released as 1.5.19 on 2026-08-02 across all five platforms — a reuse of the version number across two builds, recorded as an immutability violation and corrected by the gates that ship with 1.5.20.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "1.5.19 on 2026-08-02"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "landing/releases.json"
        },
        {
          "kind": "test",
          "ref": "tests/test_release_index.py"
        }
      ],
      "verified_at": "2026-08-03",
      "verified_how": "The canonical release record carries both 1.5.19 builds, the violation in its policy block, and the per-platform digests CI checks against the served binaries.",
      "status": "current"
    },
    {
      "id": "self-hosted-never-customer-run",
      "statement": "The self-hosted deployment model ships as Docker images and is the same product, but a full deployment inside a customer environment has not been run yet.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "has not been run yet"
        }
      ],
      "bases": [
        {
          "kind": "founder-attested",
          "ref": "the claim is an absence — there is no deployment to point at, and saying so plainly is the point"
        }
      ],
      "verified_at": "2026-08-03",
      "verified_how": "Unverifiable by construction; carried here so the registry holds the unflattering claims to the same standard as the flattering ones.",
      "status": "current"
    },
    {
      "id": "legal-entity-nz-company",
      "statement": "Proofpane is operated by PROOFPANE LIMITED, a New Zealand limited company incorporated 3 June 2026 (company number 9434021, NZBN 9429053715692), registered office 22 Harper Street, Chatswood, Auckland 0626.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "NZ company number 9434021"
        },
        {
          "file": "landing/index.html",
          "anchor": "NZBN 9429053715692"
        },
        {
          "file": "landing/trust/index.html",
          "anchor": "PROOFPANE LIMITED"
        }
      ],
      "bases": [
        {
          "kind": "external",
          "ref": "https://app.companiesoffice.govt.nz/companies/app/ui/pages/companies/9434021"
        }
      ],
      "verified_at": "2026-08-03",
      "verified_how": "Read directly off the public NZ Companies Register record for company 9434021 on this date: registered name PROOFPANE LIMITED, status Registered, registered office and address for service both 22 Harper Street, Chatswood, Auckland 0626. The register is the authority; this registry only points at it. Re-read 2026-08-04 after the incorporation date in this entry (2 June) failed to match the register (3 June): a claim whose own verified_how says it was read off a source has to match that source, and did not.",
      "status": "current"
    },
    {
      "id": "grounding-gate-scope",
      "statement": "Grounding-gate enforcement runs in the hook before the model reads the prompt, is off by default, and is wired for Claude Code only — Cursor and Hermes record but do not yet hold.",
      "surfaces": [
        {
          "file": "landing/llms.txt",
          "anchor": "record but do not yet hold"
        }
      ],
      "bases": [
        {
          "kind": "test",
          "ref": "tests/test_grounding_gate.py"
        }
      ],
      "verified_at": "2026-07-27",
      "verified_how": "End-to-end deny and approve paths verified against production on 2026-07-27; the packaged-binary gap found afterwards is disclosed in the same surface paragraph and closed by the 2026-08-02 release.",
      "status": "current"
    },
    {
      "id": "load-bearing-coverage-not-self-applied",
      "statement": "We published a mechanical criterion for whether a conformance suite can be passed without doing the work, and have not run it against the test suite this site counts.",
      "surfaces": [
        {
          "file": "landing/trust/index.html",
          "anchor": "not been run against the suite on this"
        },
        {
          "file": "landing/llms.txt",
          "anchor": "NOT been run against Proofpane's own suite"
        }
      ],
      "bases": [
        {
          "kind": "artifact",
          "ref": "https://doi.org/10.5281/zenodo.21844893"
        },
        {
          "kind": "founder-attested",
          "ref": "That the criterion has not been applied to Proofpane's own suite is a statement about work not done, and nothing can evidence an absence; it stands on the founder's word and is falsifiable the moment a measurement is published."
        }
      ],
      "verified_at": "2026-08-08",
      "verified_how": "Paper published to Zenodo 2026-08-08 (concept DOI 10.5281/zenodo.21844893, version 0.20.2 = 21845274); implementation at github.com/lywinged/load-bearing-coverage. The corpora measured are listed in the paper and do not include this repository.",
      "status": "current"
    }
  ]
}