Transport
HTTPS on the production origin with same-origin handling for inquiry submissions.
Identity
Issuer administration remains unavailable to the public and requires an approved onboarding path.
Integrity
SHA-256 hashes and canonical serialization are active; Ed25519 signing and validation are disclosed as pending.
Application
Identifier validation, bounded inputs, prepared database statements, bot trapping and inquiry rate limits.
Operations
Live service checks, immutable deployments and platform-managed storage are active for the public launch.
Issuer authority
Organizational authority review precedes access; automated suspension and key rotation remain roadmap controls.
Audit
Verification result events are recorded; full issuer lifecycle audit capabilities remain access-controlled roadmap work.
Privacy
The launch registry returns public-mode fields only; restricted and private response modes are not yet publicly exposed.
Threat model
Designed against the ways verification can fail.
The production security review must consider both technical attacks and failures of organizational authority.