{"schema":"quox.evidence.item/1","id":"cycle:1","kind":"cycle","claim_id":null,"statement":"trust-proof-self-audit-c1","not_claimed":"Not an independent third-party audit, and not a claim that no other issues exist.","status":"published","status_note":"19 published finding(s); 4 open, 15 fixed at publication.","computed_status":null,"status_history":[],"independent":{"kind":"self","note":"Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party."},"issuer":"Quox","dates":{"first":"2026-09-19T15:11:18.624Z","latest":"2026-09-20T01:38:40.825Z","as_of":"2026-09-20T01:38:40.825Z"},"freshness":{"staleness_days":null,"stale":null,"expires":null,"as_of":"2026-10-23"},"evidence":[{"type":"artifact","url":"/evidence/securityAudits.json","label":"Signed security audit log (quox.security-audit-log.v1)"},{"type":"page","url":"https://quox.ai/security","label":"The /security audit band"}],"limitations":"Quox auditing Quox. Not an independent third-party audit; findings carry allowlisted fields only.","cannot_establish":"A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.","open_findings":["finding:FND_01M2X3S6GY7JAYB3HFFT7JAYB3","finding:FND_01M2Y1G0BMMNEADZJK5VMNEADZ","finding:FND_01M2X3TKVVDVM97X56FYDVM97X","finding:FND_01M2X3WGM0EZZ3PBQ8MCEZZ3PB"],"withheld_findings":0,"capabilities":["security-audit","self-audit"],"verify":{"method":"ed25519-log","artifact_url":"/evidence/securityAudits.json","receipt_url":null,"public_key":"fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=","public_key_source":"committed in the repository (scripts/security-audit-public-key.mjs) and in public/evidence/quoxtrust-verify.mjs","locator":{"file":"/evidence/securityAudits.json","path":"cycles[0]","cycle":1},"verifier_cmd":"node quoxtrust-verify.mjs ./securityAudits.json","reproduction":"Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.","browser_verifiable":true},"citations":[{"url":"https://quox.ai/security","label":"Quox security audit log"}],"detail":{"cycle":1,"cycle_kind":"self-audit","engagement_id":"ENG_01M2X3HJ2W9PGNTVN5H59PGNTV","scope":["github.com/quoxai/quox","github.com/quoxai/quoxplan","github.com/quoxai/quoxflow","github.com/quoxai/quoxagent","github.com/quoxai/quoxbastion","github.com/quoxai/quoxmcp","github.com/quoxai/quox-repobrain"],"method":"Adversarial prompt authored by the owner, run as 9 parallel hostile audit lanes over full local checkouts of every repo in scope: credential theft, phone-home, SSRF and egress, auth boundaries, fleet backdoors, supply chain, plus running-artifact-matches-source checks.","summary":"First witnessed self-audit, and the fix sweep it forced. Findings were filed by nine parallel hostile audit lanes, with several more uncovered during the fix work itself, including two the fixes exposed: our HITL approve path dropped the very grant it existed to mint, and the trust page overclaimed 'no external telemetry'. The counts above are read live from the engagement store; every finding marked fixed was remediated test-first and verified on the running system before being resolved. The rest are published open, on purpose. An audit log that only ever shows green is indistinguishable from no audit at all.","controls_held":["Vault envelope encryption held end to end; no secret values in logs or API responses","Tenant scoping held on vault, memory, HITL and admin paths (queries traced, not assumed)","Privilege-escalation guards held on both role paths","Job-envelope signing fails closed; delimiter injection previously found is fixed","No phone-home beyond the disclosed heartbeat and license check, and the heartbeat is now strictly opt-in","Agent RBAC held during the fix sweep itself: the builder-role agent session was refused allowlist changes and could not approve its own gated actions"],"totals":{"critical":2,"high":7,"medium":7,"low":3,"fixed":15,"open":4,"refuted":0},"ward":{"chain_id":"ward:org/quox/env/production","hash_recipe":"sha256(prev_chain_hash|chain_id|seq|ward_entry_id|witnessed_at|source_kind|source_id|payload_hash), hex","receipts":2}},"human_url":"/evidence/explore#cycle:1","machine_url":"/evidence/items/cycle:1.json","api_url":"/api/evidence/cycle:1","contract":{"authentic_is_not_correct":"A valid signature or a recomputed hash proves a record is authentic and unmodified. It does not prove the system behaved correctly or that a finding list is complete.","independence":"self = issued by Quox and recomputable by anyone, not audited by a third party. visitor-recomputable = the reader recomputes it offline from published material. external = an outside party issued or hosts the primary record. Quox-verified is never independently verified.","curated_status":"status OWNER-APPROVED means the owner approved the wording for publication. It is not a computed VERIFIED status. computed_status, where present, is computed from proof-engine runs and is reported separately.","verify_caveat":"authentic != correct. A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly."}}