{"schema":"quox.evidence.item/1","id":"cycle:10","kind":"cycle","claim_id":null,"statement":"v1.4, Confidentiality & Supply-chain (verdict PASS)","not_claimed":"Not an independent third-party audit, and not a claim that no other issues exist.","status":"published","status_note":"3 published finding(s); 1 open, 2 fixed at publication.","computed_status":null,"status_history":[],"independent":{"kind":"self","note":"Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party."},"issuer":"Quox","dates":{"first":"2026-10-02T00:58:30.058Z","latest":"2026-10-02T02:14:07.924Z","as_of":"2026-10-02T02:14:07.924Z"},"freshness":{"staleness_days":null,"stale":null,"expires":null,"as_of":"2026-10-23"},"evidence":[{"type":"artifact","url":"/evidence/securityAudits.json","label":"Signed security audit log (quox.security-audit-log.v1)"},{"type":"page","url":"https://quox.ai/security","label":"The /security audit band"}],"limitations":"A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.","cannot_establish":"A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.","open_findings":["finding:FND_01M3X2HMA7BZD68KFGWPBZD68K"],"withheld_findings":0,"capabilities":["security-audit","trust-bar"],"verify":{"method":"ed25519-log","artifact_url":"/evidence/securityAudits.json","receipt_url":null,"public_key":"fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=","public_key_source":"committed in the repository (scripts/security-audit-public-key.mjs) and in public/evidence/quoxtrust-verify.mjs","locator":{"file":"/evidence/securityAudits.json","path":"cycles[9]","cycle":10},"verifier_cmd":"node quoxtrust-verify.mjs ./securityAudits.json","reproduction":"Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.","browser_verifiable":true},"citations":[{"url":"https://quox.ai/security","label":"Quox security audit log"}],"detail":{"cycle":10,"cycle_kind":"trust-bar","engagement_id":"ENG_01M3X1XBG75GX72VJCVA5GX72V","scope":{"covered":"Secret confidentiality in logs/responses/transcripts across collector + auth; install integrity + dependency pinning; artifact provenance observability.","excluded":["Injection / untrusted-model containment (T5/T6) -> v1.5.","Hostile third-party plugin isolation -> v2.0.","HSM/key-ceremony hardening of the license signing key (owner-only).","Autonomous rotation of any secret (owner-gated; flag only)."]},"method":null,"summary":"v1.4 asks whether secrets leak and whether we can prove what runs. The confidentiality core is sound: credentials resolve by reference (never returned), receipts are content-free, mandatory audit always stored. One real leak (CF1: raw tool-input logging, live in prod) and one supply-chain gap (unpinned dep) found and fixed; install integrity already fails closed (CA2). Build-provenance observability (CA1) is named with a precise remediation spec (quoxagent already passes).","controls_held":["CF1 (fixed): collector tool-input logging redacted via summarizeToolInputForLog (secret keys masked, free-text reduced to length, nested to shape), red-proven pin; deployed + verified in running collector.","CF2 (clean): credentials resolved by credential_id reference, raw secret never in tool input or response; vault tools echo metadata only.","CF3 (clean): mandatory execution evidence always stored + witnessed regardless of transcript retention; receipts are content-free commitments (digest + per-field hashes).","CA2 (pass): quoxagent install.sh verifies BINARY_SHA256 and refuses on mismatch (exit 1; bypass needs explicit flag).","T-ART dep (fixed): @anthropic-ai/claude-code pinned @2.1.197 in the collector Dockerfile."],"totals":{"critical":0,"high":0,"medium":3,"low":0,"fixed":2,"open":1,"refuted":0},"ward":{"chain_id":"ward:org/quox/env/production","hash_recipe":"sha256(prev_chain_hash|chain_id|seq|ward_entry_id|witnessed_at|source_kind|source_id|payload_hash), hex","receipts":2},"version":"v1.4","bar_name":"Confidentiality & Supply-chain","verdict":"PASS","known_debt":["CA1 build-provenance observability: collector/auth /health return semver not git-sha; dashboard no version; bastion no Makefile/ldflags. quoxagent passes (MF-P1). Remediation spec: ARG GIT_SHA + ENV + /health git_sha via --build-arg (collector/auth), LABEL+/version.json (dashboard), Makefile+ldflags (bastion). Build-pipeline change for a SUPERVISED mini-cycle, not unsupervised overnight. Finding FND_01M3X2HMA7... left CONFIRMED (partial).","CF1 free-text allowlist is heuristic (key-name based); a secret in an unlisted non-free-text string key >64 chars is truncated+shown. Low residual; widen the free-text key set if needed."],"passed_date":"2026-10-02","contract_version":"1.0.0"},"human_url":"/evidence/explore#cycle:10","machine_url":"/evidence/items/cycle:10.json","api_url":"/api/evidence/cycle:10","contract":{"authentic_is_not_correct":"A valid signature or a recomputed hash proves a record is authentic and unmodified. It does not prove the system behaved correctly or that a finding list is complete.","independence":"self = issued by Quox and recomputable by anyone, not audited by a third party. visitor-recomputable = the reader recomputes it offline from published material. external = an outside party issued or hosts the primary record. Quox-verified is never independently verified.","curated_status":"status OWNER-APPROVED means the owner approved the wording for publication. It is not a computed VERIFIED status. computed_status, where present, is computed from proof-engine runs and is reported separately.","verify_caveat":"authentic != correct. A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly."}}