Security claim matrix
The table separates the relation from the responsibilities that remain with the integrating application or operator.
| Property | Established by V1 | Public or external boundary |
|---|---|---|
| Issuer signature | ES256 verification under the exact configured P-256 key | Key selection, provenance, rotation, and governance are external |
| Disclosures | Exactly two bounded scalar openings match signed _sd digests and the claim relation | Disclosed values, their order, and circuit capacity bucket are public |
| Holder binding | Bounded compact KB-JWT signature, audience, nonce, iat, and sd_hash relation | Holder-key custody and wallet security are external |
| Audience and purpose | Exact bytes are bound into the request transcript | The application defines their semantics and authorization effect |
| Time | Request bounds and supported KB-JWT time relation are checked | Clock source and surrounding freshness policy are external |
| Revocation | Private VALID membership under the selected revocation root, bridged to the presentation | Root, issuer, epoch, interval, and cohort are public; authority and rotation are external |
| Replay | The transcript binds nonce and context; successful presentation verification consumes it | Durable, atomic replay storage is supplied by the application |
| Circuit identity | Versioned accepted proof parameters and component order are fixed | New shapes require a new supported identity and release evidence |
Audit status
This code has not received an independent cryptographic audit, only the Longfellow-ZK circuit builder and solver has. The release gates provide implementation evidence; they are not a substitute for an audit or a guarantee of cryptographic security.
Free without warranty
This is free and open source software provided without warranty under the terms of the GNU GPL v3 license. Professional support, maintenance, integration services, and contractual warranty options are available separately. Please contact us for further information.
Read release assurance for the exact automated gates and privacy and linkability for information that remains public.