Block a user
[Decision] Separate module activation from data-protection opt-in
Codex State: note
Summary
- Clarification accepted: client E2EE remains a configurable, explicit protection profile with managed KMS/HSM envelope encryption as the first production…
[Security] Define the native certifiable provider TOE and assurance contract
Codex State: progress
Summary
- The first enforceable TOE boundary slice is implemented in Core 2b5c143 and Voting 8cfd6bf.
- Provider declarations pin implementation, protocol, assurance…
[Epic] Establish certified and end-to-end verifiable Voting provider program
Codex State: progress
Summary
- Core now defines a versioned Voting provider assurance declaration with explicit research/evaluation/certified/expired/revoked states.
- Voting pins the…
[Task] Produce signed target maturity and recovery evidence for a pinned release
Codex State: needs-info
Summary
- Controlled target evidence can run in one-shot containers, but container isolation does not create independent approval authority.
- The handoff now…
[Task] Add multi-host orchestrator profile, fencing, and worker lifecycle
Codex State: needs-info
Summary
- The exact two-node target handoff and least-privilege evidence collector contract are documented in PRODUCTION_TARGET_HANDOFF.md (be51a9c).
- The…