Evidence-first visual truth interface

XPScerpto shows operational truth before claims.

XPScerpto is a governed sovereign cryptographic infrastructure portal. This homepage exposes verified evidence, current NO flags, product surfaces and gate-bound security posture before any claim language.

View Evidence Read Architecture / Docs

Truth gate

Truth Before Claims

Claims are displayed only when a gate, report or source is linked. NO flags remain visible.

XPScerpto shows what passed.
XPScerpto shows what failed or is not yet claimed.
XPScerpto does not claim closure from text only.
XPScerpto does not claim production readiness without acceptance evidence.
XPScerpto does not claim live external IMAP verification without real mailbox replay.

Explicit NO flags

Not Currently Claimed

The public website does not soften or hide missing external evidence.

Production-ready deployment

NOT CLAIMED

PRODUCTION_READY=NO

Live external IMAP mailbox verification

NOT CLAIMED

LIVE_EXTERNAL_IMAP_MAILBOX_VERIFIED=NO

Full universal closure of all modules

NOT CLAIMED

evidence required per module

External credential-dependent gates

FAIL-CLOSED WHERE APPLICABLE

no real mailbox credentials provided

Product surfaces

Real application surfaces, not stock artwork.

Each card links to an actual route and uses real local screenshots after browser replay.

App Shell

SCOPED

Scoped user workspace for projects, capsules and bounded requests.

Scoped workspace
Capsule history
No global authority

Open route

Admin Control Room

AUTH REQUIRED

Governed editorial, evidence, runtime and deployment control plane.

Auth boundary
Evidence manager
Deployment readiness

Open route

Correspondence Center

FAIL-CLOSED LIVE

Admin correspondence operations with live IMAP truth boundary preserved.

Threading view
Live status gate
No private cache

Open route

Evidence Center

EVIDENCE

Public proof plane for reports, runtime truth and closure evidence.

Evidence cards
Report links
Truth flags

Open route

Root Control

LOCAL GATED

Local/VPN/hardware-gated root authority outside normal admin power.

Root token gate
Local authority
No public access

Open route

Docs / Architecture

PUBLIC DOCS

Architecture, authority model, threat model and validation policy.

Architecture docs
Threat model
CI gates

Open route

Evidence Center preview

Evidence cards with explicit status and source links.

Unavailable values remain unavailable; missing artifacts are not fabricated.

Responsive UX Closure

PASS

Generated: 2026-06-17T07:52:40Z
Source/final SHA: unavailable

report/source evidence bundle

Deploy Identity Repair

VERIFIED

Generated: 2026-06-17T07:52:40Z
Source/final SHA: unavailable

report/source evidence bundle

Live Content Parity Repair

UNAVAILABLE

Generated: 2026-06-17T07:52:40Z
Source/final SHA: unavailable

report/source evidence bundle

Admin Cache Safety

FAIL-CLOSED

Generated: 2026-06-17T07:52:40Z
Source/final SHA: unavailable

report/source evidence bundle

First-run Setup Lock

FAIL-CLOSED

Generated: 2026-06-17T07:52:40Z
Source/final SHA: unavailable

report/source evidence bundle

Web Product Gates

UNAVAILABLE

Generated: 2026-06-17T07:52:40Z
Source/final SHA: unavailable

report/source evidence bundle

Brand Consistency Gate

UNAVAILABLE

Generated: 2026-06-17T07:52:40Z
Source/final SHA: unavailable

report/source evidence bundle

Deployment identity

Release identity and hashes wrap safely.

The deployment fingerprint endpoint remains the source of truth for live identity.

release idb015b55f61ee4730b9c39e48

deploy fingerprint3f0db08dd05d7ac9704e0446c5e9c7c420cb4e33a4903b73441fc796e6b35f9f

source package hashunavailable

final package hashunavailable

build identityruntime_tree

evidence bundle hashunavailable

current deployment statenot production-ready; evidence-first public surface

Security / integrity posture

Gate-bound posture, not trust theater.

Security cards point to the corresponding route, API or service-worker source.

Operational timeline

Recent phases remain linked to evidence.

Timeline entries avoid unsupported closure language.

Responsive UX all devices closurePASSartifact
Deploy identity repairVERIFIEDartifact
Live content parity repairUNAVAILABLEartifact
Admin/cache safety gatesFAIL-CLOSEDartifact
Evidence/product gatesUNAVAILABLEartifact

Public SurfaceEvidence-first read planeNo hidden production claim

User RouteScoped capsule workspaceGlobal authority blocked

Admin ControlEditorial + runtime governanceRoot powers excluded

Root-ControlLocal/hardware gatedOffline release authority

Mobile installable web shell

Install XPScerpto as a safe PWA shell.

The mobile shell may cache only public UI assets and safe public shells. Admin, correspondence, evidence, live IMAP status, API responses, cookies, CSRF tokens, message content, raw MIME, and attachments remain network-only/no-store.

Browser install prompt appears only when the browser exposes it.

PWA_INSTALLABLEYES

HOME_SCREEN_INSTALL_OBSERVEDYES_FROM_USER_SCREENSHOT

STANDALONE_MODEYES_FROM_USER_SCREENSHOT_OR_BROWSER_SIGNAL

OFFLINE_PUBLIC_SHELLYES

NATIVE_ANDROID_APKNO

NATIVE_IOS_APPNO

APP_STORE_READYNO

PLAY_STORE_READYNO

PRODUCTION_READYNO

P6.9.4-WEB-PWA-ADMIN-OPERATIONS-TRUTH-GATED

XPScerpto Sovereign Execution Portal

A sovereign cryptographic platform front page for architecture, authority boundaries, user/admin/root planes and evidence-first trust signals — with no external dependency and no unsupported production claim.

platformplatform.apiHWDomains

Architecture HSMD Evidence Open live demo

Evidence-bound claimsNo native claim unless attachedAdmin-editable homepageNo CDN / no external script

NO_CDNlocal-only assets

FULL_NAVcomplete public routes

TRUTH_GATEproduction claim locked

Runtime Truth Contract

backend_realTrue

backend_modedetached

native_runtime_attachedFalse

production_readyFalse

Platformplatform.apiHWDomains

production_ready is computed by backend policy, not by editorial toggle.

Sovereign Authority Chain

Platform → platform.api → HW → Domains

The front page now makes the sovereign authority path visible before any marketing claim.

01Platform

external world boundary, provider gating, public facts

02platform.api

filtered authorized facts and sealed runtime claims

03HW authority

capability truth, routing envelopes and native attachment status

04Domains

SIMD / VeloSeal64 / Integrity / PQC / FHE consume capability capsules

HSMD / HSM Evidence Gate

HSMD: from HSM presence to verifiable claim

A dedicated hardware-trust admission section that keeps HSM/PKCS#11 inside XPScerpto authority and evidence boundaries.

HSMD places HSM and PKCS#11 in a strict admission path: discovery, fingerprinting, challenge-sign verification, receipt binding, drift monitoring, then scoped admission or fail-closed rejection.

PlatformHWHSMDDomains

01Provider discovery

Identify providers and slots without granting ambient trust.

02Device fingerprint

Bind slot, provider and policy identity beyond a file path.

03Challenge-sign

Verify a live cryptographic response from the expected hardware path.

04Receipt binding

Record an auditable admission receipt.

05Drift monitor

Provider, slot or identity drift returns the claim to fail-closed.

06Scoped admission

Domains consume only the admitted claim within explicit authority boundaries.

What HSMD refuses

PKCS#11 config alone

Configuration is not evidence.

Software fallback

It is not real HSM proof.

Mock provider

Testing only; never a live trust claim.

Stale evidence

Old receipts or unresolved drift fail closed.

Open HSMD section Evidence Center

Module Constellation

Sovereign module constellation

The homepage shows the platform as a governed system, not as disconnected feature cards.

surface-readyPlatform

public boundary and provider closure

authority-gatedHW

runtime intelligence authority

evidence-admission gateHSMD

HSM / PKCS#11 evidence admission gate

HW-authorized onlySIMD

sealed execution route

truth-gatedVeloSeal64

demo-capable unit surface

evidence-firstIntegrity Fabric

seal, transcript and evidence story

not final productionPQC

post-quantum fabric status

status-onlyFHE

foundation/status posture only until real engine closure

gatedRuntime

native adapter gate

Studio-grade control plane

Sovereign portal command center

A production-style interface for public review, editorial control and evidence inspection.

Truth-gated runtime

backend_real is separated from native_runtime_attached and production_ready.

Advanced Admin Control Center

Pages, blocks, SEO, language content, navigation, footer, theme and evidence are governed from /admin.

Live runtime demo

A backend-backed demonstration emits JSON evidence without claiming native C++ attachment.

EU presentation posture

Strong public narrative with clear limits: presentation-ready, not technical-audit-final.

Public interfaceresponsive, multilingual, evidence-aware

Admin studiopages, blocks, SEO, theme, preview, history

Runtime truthbackend_real and native status stay separate

Evidence Wall

The page foregrounds what is proven, gated, or explicitly not production-ready.

backend_realtrue

native_runtime_attachedfalse

production_readyfalse

backend_modedetached

NO_CDNlocal CSS/JS only

NO_EXTERNAL_FONTsystem font stack only

NO_EXTERNAL_SCRIPTno external script authority

SEALED_ASSET_MANIFESTstatic asset hashes sealed

FAKE_TELEMETRY_BLOCKEDbackend truth contract wins

FINAL_PUBLIC_PRODUCTION_RELEASENO

Authority lineage

Four separated control planes

Public, app, admin and root-control are intentionally split to prevent governance collapse.

Publicevidence-facing read surfacesealed

Appscoped sandbox execution workspacesealed

Admincontent/runtime/threat governancesealed

Root-Controllocal offline release authoritysealed

Separated Control Planes

User / Admin / Root Plane Map

The landing page now explains which plane can do what and which powers are intentionally absent.

PUBLIC_READ_ONLYPublic

read-only pages, evidence, docs and truthful runtime banners

SCOPED_SANDBOX_AUTHORITYUser Workspace

scoped capsules and bounded live-demo requests

OPERATIONS_GOVERNANCE_AUTHORITYAdmin Control

editorial workflow, evidence manager and runtime governance view

LOCAL_ROOT_RELEASE_AUTHORITYRoot-Control

local/VPN/hardware-gated release authority, not normal admin power

Evidence-first UI

Evidence-first experience

The portal renders truth, lineage, capsules and rejection state before marketing claims.

NO_FAKE_TELEMETRYenforced

ROLE_BOUNDARIESenforced

ROOT_AUTHORITYisolated

READY_FOR_P7native runtime next

Homepage Readiness Dossier

Homepage readiness dossier

A sovereign front page must sell confidence without lying about runtime proof.

Navigation complete

Home, sovereignty, architecture, modules, security, performance, evidence, EU readiness, docs and contact.

Executive hierarchy

Hero, authority chain, module constellation, evidence wall and plane map are visible without scrolling through admin-only context.

Sovereign dependency posture

No CDN, no external font, no remote script and no third-party visual dependency.

Truth preserved

REAL_NATIVE_RUNTIME_EXECUTION remains gated until the native adapter exists.

Authority visual

Home

This portal distinguishes the real Python backend from the native C++ runtime. Claims remain gated by evidence and runtime truth checks.

Platform → API

External facts enter through the public/backend boundary only.

HW authority

Native runtime is not asserted unless the configured probe and evidence allow it.

Domains

SIMD/VeloSeal64/Integrity/PQC pages consume evidence-bound status, not local claims.

Evidence

Public proof panels read from the evidence manager and runtime truth contract.

Truth contract

No unproven production claim

production_ready is computed from native runtime attachment plus qualifying evidence; it is not an editorial toggle.

Evidence-first UI

Runtime Adapter Dossier

Real native execution or explicit fail-closed state

Adapter protocol--portal-health, --portal-units, --portal-run-unit, --portal-attack-storm and --portal-evidence must return JSON with native_runtime_attached=true.

No fake runtimePython fallback execution is disabled by policy for live unit claims.

Evidence bindingNative runs register sealed evidence only when the adapter proves native attachment.

User Operations Plane

Scoped projects, API keys, capsules and audit traces

Projects

Per-user project records for execution grouping.

Capsules

Every accepted or rejected request creates a verifiable capsule.

API governance

Scoped keys carry explicit capabilities and quotas.

Evidence Center

Public proof without production overclaim

Runtime truth, asset seals, language parity, security chain status and deployment readiness are exposed as verifiable reports.

XPScerpto shows operational truth before claims.

Truth Before Claims

Not Currently Claimed

Production-ready deployment

Live external IMAP mailbox verification

Full universal closure of all modules

External credential-dependent gates

Real application surfaces, not stock artwork.

App Shell

Admin Control Room

Correspondence Center

Evidence Center

Root Control

Docs / Architecture

Evidence cards with explicit status and source links.

Responsive UX Closure

Deploy Identity Repair

Live Content Parity Repair

Admin Cache Safety

First-run Setup Lock

Web Product Gates

Brand Consistency Gate

Release identity and hashes wrap safely.

Gate-bound posture, not trust theater.

Admin Auth Protected

Admin Noindex Preserved

Sensitive Cache Blocking Active

Setup Lock Enforced

API Protection Enforced

Service Worker Private Cache Blocked

Deploy Identity Preserved

Recent phases remain linked to evidence.

Claims remain locked until runtime evidence proves them.

Install XPScerpto as a safe PWA shell.

XPScerpto Sovereign Execution Portal

Platform → platform.api → HW → Domains

HSMD: from HSM presence to verifiable claim

What HSMD refuses

PKCS#11 config alone

Software fallback

Mock provider

Stale evidence

Sovereign module constellation

Sovereign portal command center

Truth-gated runtime

Advanced Admin Control Center

Live runtime demo

EU presentation posture

Evidence Wall

Four separated control planes

User / Admin / Root Plane Map

Evidence-first experience

Homepage readiness dossier

Home

Truth contract

Runtime Adapter Dossier

User Operations Plane

Projects

Capsules

API governance

Evidence Center