H2 independent security
Latest pen-test report status
Status: waiting for independent external report. BUILD_DONE H2 requires a report from the last 12 months with zero Critical or High findings open, bound to the reviewed commit.
Open pentest packet
X4 independent legal
Latest legal review status
Status: waiting for independent legal review. BUILD_DONE X4 requires zero Critical or High legal blockers open against the cooperative articles and bylaws.
Open legal packet
Open governance map
Incident response
Breach-response record
The public breach status is linked from the trust center, currently shows no breach pending, restates the 72h disclosure pledge, and names the signed incident-receipt fields.
Open breach record
Business-model invariant
Financial audit evidence
Local financial contracts verify ad_revenue == 0 and data_sale_revenue == 0. No ad endpoint and no data-sale endpoint are part of the public attack surface.
Open blocker manifest
Attack surface
Reviewer route inventory
The attack-surface packet lists public routes, methods, citizen-data flags, and webhook signature requirements without exposing secret values.
Open attack surface
Open visual map
Boundary
Public status, not BUILD_DONE evidence
This index is a reviewer handoff and not BUILD_DONE evidence. H2, X4, E2/E3, and I0 remain blocked until their independent or real-pilot artifacts pass the gates.
Open build status