{"schema":"quox.evidence.item/1","id":"cycle:6","kind":"cycle","claim_id":null,"statement":"v1, Release Gate (verdict PASS)","not_claimed":"Not an independent third-party audit, and not a claim that no other issues exist.","status":"published","status_note":"33 published finding(s); 3 open, 30 fixed at publication.","computed_status":null,"status_history":[],"independent":{"kind":"self","note":"Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party."},"issuer":"Quox","dates":{"first":"2026-09-30T02:19:50.581Z","latest":"2026-10-01T03:46:06.305Z","as_of":"2026-10-01T03:46:06.305Z"},"freshness":{"staleness_days":null,"stale":null,"expires":null,"as_of":"2026-10-23"},"evidence":[{"type":"artifact","url":"/evidence/securityAudits.json","label":"Signed security audit log (quox.security-audit-log.v1)"},{"type":"page","url":"https://quox.ai/security","label":"The /security audit band"}],"limitations":"A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.","cannot_establish":"A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.","open_findings":["finding:FND_01M3R1TX7ES2ZDTR6YBSS2ZDTR","finding:FND_01M3ST59E9252CVE8C6F252CVE","finding:FND_01M3R9X647CMRA4NBBXFCMRA4N"],"withheld_findings":0,"capabilities":["security-audit","trust-bar"],"verify":{"method":"ed25519-log","artifact_url":"/evidence/securityAudits.json","receipt_url":null,"public_key":"fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=","public_key_source":"committed in the repository (scripts/security-audit-public-key.mjs) and in public/evidence/quoxtrust-verify.mjs","locator":{"file":"/evidence/securityAudits.json","path":"cycles[5]","cycle":6},"verifier_cmd":"node quoxtrust-verify.mjs ./securityAudits.json","reproduction":"Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.","browser_verifiable":true},"citations":[{"url":"https://quox.ai/security","label":"Quox security audit log"}],"detail":{"cycle":6,"cycle_kind":"trust-bar","engagement_id":"ENG_01M3R1RVXHFNRB3GF6CAFNRB3G","scope":{"covered":"Trusted first-party platform code: collector tool-execution boundary, connector governed choke, quoxchat widget, quoxagent job/dev-invoke, bastion keys/sudo/exec.","excluded":["Hostile third-party marketplace plugin isolation (thirdPartyPluginHost document injection), deferred to v2.0, stated limit.","Full human-PTY per-command mediation, stated limit.","Universal LLM-injection immunity, stated limit."]},"method":null,"summary":"Bar v1 is the release-blocker gate: an independent adversarial pass (RB1-RB9) over the frozen release surface, with every boundary re-verified on the running collector, auth, quoxagent fleet and bastion. 33 findings were raised in the c4 cycle; the release-blocking set is remediated and deployed. The two deploy-pending blockers at the 2026-09-30 pass, F6 (bastion keys/deploy grant) and F7 (quoxagent job-envelope replay), were DEPLOYED to the live fleet on 2026-10-01 (F6 live on the bastion host; F7 dc25995 on 34/36 quoxagent hosts) and resolved.","controls_held":["Cross-tenant isolation made platform-wide: org derived from authenticated identity, never caller-supplied body/header, across ~8 header-routes + the native-tool route + security/compliance routes + vault-credential path (FND resolved).","Arbitrary shell/SQL (ssh_exec, remote_ssh, db_query writes) and the wider bastion-tool shell-injection class now require human approval and are input-validated (multiple criticals resolved).","Approval cards render the exact effective action (to/cc/bcc/subject/body, command, SQL), no blind-approve (T4).","Fail-closed gates: 4-eyes policy-change gate no longer fails open on audit-write error; WARD witness no longer silently no-ops; GOV-4 store outage denies (T2).","Signature integrity: AEE signature scope now covers HITL gate fields; approval_events chain covers action/actor; offline verifier binds key_id (T8).","F6 DEPLOYED: bastion keys/deploy + sudo/setup gated behind the collector-signed approval grant (parallel path closed).","F7 DEPLOYED: quoxagent /jobs + /dev/invoke replay/freshness guard keyed on the SIGNED CreatedAt (dc25995, 34/36 hosts)."],"totals":{"critical":8,"high":13,"medium":6,"low":1,"fixed":30,"open":3,"refuted":0,"info":5},"ward":{"chain_id":"ward:org/quox/env/production","hash_recipe":"sha256(prev_chain_hash|chain_id|seq|ward_entry_id|witnessed_at|source_kind|source_id|payload_hash), hex","receipts":2},"version":"v1","bar_name":"Release Gate","verdict":"PASS","known_debt":["F4 plugin backends share the internal service key (confirmed, documented), carried to a higher bar.","GOV-1 policy routes trust org_id from query/body (low hardening, candidate), carried to v1.2 hardening.","The v1.2 Complete-Mediation Brutaloop (2026-10-01) surfaced further items for v1.2/v1.3, see ~/QUOXTRUST_V1_2_FINDINGS.md."],"passed_date":"2026-09-30","contract_version":"1.0.0"},"human_url":"/evidence/explore#cycle:6","machine_url":"/evidence/items/cycle:6.json","api_url":"/api/evidence/cycle:6","contract":{"authentic_is_not_correct":"A valid signature or a recomputed hash proves a record is authentic and unmodified. It does not prove the system behaved correctly or that a finding list is complete.","independence":"self = issued by Quox and recomputable by anyone, not audited by a third party. visitor-recomputable = the reader recomputes it offline from published material. external = an outside party issued or hosts the primary record. Quox-verified is never independently verified.","curated_status":"status OWNER-APPROVED means the owner approved the wording for publication. It is not a computed VERIFIED status. computed_status, where present, is computed from proof-engine runs and is reported separately.","verify_caveat":"authentic != correct. A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly."}}