Make the claims inspectable.
A clear distinction between an architectural design, a reported demonstration and independently reproduced evidence.
The minimum evaluation package.
What was permitted?
Inspect the request context, verification policy and authorisation decision.
Evaluation artifactWhat changed?
Trace predecessor invalidation and authorised successor establishment.
Evaluation artifactWhat is committed?
Distinguish pending evidence from completed finality where applicable.
Evaluation artifactArtifacts shown describe the evaluation package. Reviewed test results are not yet published on this site.
Boundaries are part of the architecture.
Design is not independent validation.
This site describes the intended CISP design. It does not publish an independent protocol audit, production assurance results, verified performance metrics or compliance certification.
Session integrity is not endpoint health.
A new session does not clean an operating system. Suspected signing-key compromise needs separately authorised recovery.
Request proof is not business permission.
Application object, tenant and action authorisation must remain enforced at the execution boundary.
Signatures are not transport confidentiality.
Long-term confidentiality needs a specified key-establishment and payload-encryption profile.
What should a pilot deliver?
A versioned profile, threat model, verification and lifecycle tests, downgrade and failure tests, recovery lineage, finality records where applicable, reproducible measurements and a limitations statement.
See the session lifecycle under test.
Explore the boundary. Inspect the decision. Trace the recovery.