{"schema":"quox.evidence.item/1","id":"cycle:7","kind":"cycle","claim_id":null,"statement":"v1.2, Complete Mediation (verdict PASS)","not_claimed":"Not an independent third-party audit, and not a claim that no other issues exist.","status":"published","status_note":"4 published finding(s); 0 open, 4 fixed at publication.","computed_status":null,"status_history":[],"independent":{"kind":"self","note":"Issued by Quox about Quox systems (or customer sites tested under proof of control); signed by the Quox publisher key; not audited by a third party."},"issuer":"Quox","dates":{"first":"2026-10-01T18:40:27.951Z","latest":"2026-10-02T00:44:45.759Z","as_of":"2026-10-02T00:44:45.759Z"},"freshness":{"staleness_days":null,"stale":null,"expires":null,"as_of":"2026-10-23"},"evidence":[{"type":"artifact","url":"/evidence/securityAudits.json","label":"Signed security audit log (quox.security-audit-log.v1)"},{"type":"page","url":"https://quox.ai/security","label":"The /security audit band"}],"limitations":"A Quox release-gate pass over a frozen surface, with known debt listed in the record. Not an independent third-party audit.","cannot_establish":"A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. It does not establish that the findings are complete, correctly graded, or that no other issues exist.","open_findings":[],"withheld_findings":0,"capabilities":["security-audit","trust-bar"],"verify":{"method":"ed25519-log","artifact_url":"/evidence/securityAudits.json","receipt_url":null,"public_key":"fIQ/oPZSVq30nXqR5yU0Ny47QhHVNrD/PDqxkoIyEck=","public_key_source":"committed in the repository (scripts/security-audit-public-key.mjs) and in public/evidence/quoxtrust-verify.mjs","locator":{"file":"/evidence/securityAudits.json","path":"cycles[6]","cycle":7},"verifier_cmd":"node quoxtrust-verify.mjs ./securityAudits.json","reproduction":"Download /evidence/securityAudits.json and /evidence/quoxtrust-verify.mjs (dependency-free, Node 18+). Run the verifier command. It recomputes every WARD receipt chain_hash under the published recipe and verifies the Ed25519 signature over the canonicalized log with the committed public key. Exit 0 means authentic and unmodified; it does not mean the findings are complete or correct.","browser_verifiable":true},"citations":[{"url":"https://quox.ai/security","label":"Quox security audit log"}],"detail":{"cycle":7,"cycle_kind":"trust-bar","engagement_id":"ENG_01M3WC959AS5XWEGCGVBS5XWEG","scope":{"covered":"Trusted first-party platform effect paths across collector, connectors, quoxchat widget, quoxagent, bastion.","excluded":["Hostile third-party marketplace plugin isolation, deferred to v2.0 (stated limit).","Full human-PTY per-command mediation, stated limit.","Universal LLM-injection immunity, stated limit."]},"method":null,"summary":"Bar v1.2 is the complete-mediation bar: a bounded adversarial sweep enumerated every effect path across 5 surfaces vs origin/main, and the T9 conformance pin now proves every effect-verb tool sits in exactly one reviewed bucket. Four must-fixes closed the gaps the sweep found; all are deployed to the running systems with red-proven CI pins.","controls_held":["MF-1: bastion DELETE /keys/{id} revoke now requires the collector-signed approval grant (F6 sibling closed), live the bastion host, running-exe verified.","MF-2: native externalEffect tools (alerts_manage silence, backup_run, keeper_backup_create, deploy_template) default to HITL via AGENT_ALWAYS_PROPOSE + withApprovalGate, with non-blind T4 cards, NOT blanket-gated, live in the running collector.","MF-3: github-proxy write routes routed through the executeConnectorTool governance choke (policy/approval/ledger/WARD); generate-notes via mediateGovernancePolicy + WARD, live in the running collector.","MF-4: quoxagent /dev/invoke verifies signature before freshness (loopback pre-consumption DoS closed), live 34/36 fleet.","hat_load_bundle classified (QuoxHat P4, option A: within-envelope capability selection, witnessed, not an external effect), T9 pin green."],"totals":{"critical":0,"high":3,"medium":1,"low":0,"fixed":4,"open":0,"refuted":0},"ward":{"chain_id":"ward:org/quox/env/production","hash_recipe":"sha256(prev_chain_hash|chain_id|seq|ward_entry_id|witnessed_at|source_kind|source_id|payload_hash), hex","receipts":2},"version":"v1.2","bar_name":"Complete Mediation","verdict":"PASS","known_debt":["MF-2(b): gemini_generate/perplexity_research have no per-org cost-budget gate (no budget infra exists; honest TODO, carried forward).","tool-def install fails open on unset INTERNAL_SERVICE_KEY (WEAK, v1.2 hardening).","plugin-declared effect:'read' on a non-verb-named tool escapes the F5 default gate (WEAK).","bastion PUT /hosts + registry import re-target the fleet without a grant (MEDIUM, v1.2 hardening).","LATENT: quoxagent internal/protocol handleExecute/handleInvoke unsigned/unfresh, no live caller; guard before wiring.","v1.3 Resilience: quoxagent seen-set is in-memory only (replay window reopens on restart)."],"passed_date":"2026-10-01","contract_version":"1.0.0"},"human_url":"/evidence/explore#cycle:7","machine_url":"/evidence/items/cycle:7.json","api_url":"/api/evidence/cycle:7","contract":{"authentic_is_not_correct":"A valid signature or a recomputed hash proves a record is authentic and unmodified. It does not prove the system behaved correctly or that a finding list is complete.","independence":"self = issued by Quox and recomputable by anyone, not audited by a third party. visitor-recomputable = the reader recomputes it offline from published material. external = an outside party issued or hosts the primary record. Quox-verified is never independently verified.","curated_status":"status OWNER-APPROVED means the owner approved the wording for publication. It is not a computed VERIFIED status. computed_status, where present, is computed from proof-engine runs and is reported separately.","verify_caveat":"authentic != correct. A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly."}}