Documentation

Audit Chain and Signed Reports

Build a tamper-evident audit chain on the edge: append-only logs, signed reports, lock scope, and the honest limits of tamper resistance.

18 min read

Ed25519 Trust Anchors

Ed25519 trust anchors for edge devices: key generation, signing, rotation schedules, and chaining into OTA updates and secure boot.

14 min read

mTLS and Certificate Pinning

A full mTLS lifecycle for edge fleets: private CA, per-device certificates, adapter configuration, rotation and revocation.

20 min read

Protected Component Delivery and Verification

Every file in pyvorin-native 1.0.9 ships in the wheel and is SHA256 hash-checked at import. The Ed25519 manifest and cache signatures are not yet active in the shipped build — here is exactly what is and is not verified today.

8 min read

Supply Chain Security

One wheel, 5,098 hash-listed files, enforced integrity checks at import — and a manifest signature not yet active. The honest supply-chain inventory.