Trust Center · Dossier
The dossier exists. Its text is not here yet.
A publication is a ceremony with a mode ruling, a digest, and a date. This page holds the artifact's record until all three are true.
Know what the dossier is
The QERYX evaluator dossier is the consolidated pre-evaluation record a formal reviewer starts from. One document, five registers:
- Security Target skeleton — TOE boundary, assets, threat statement, assumptions, and security objectives.
- Protection-Profile conformance matrix — claim versus gap against the application-software profile with its cryptographic extended package, the VPN-client profile for QLEAP, and the CNSA 2.0 gate.
- Assurance-gap ledger — every finding, tiered from standards-accuracy blockers to process-pending lab items, each with its remediation.
- Per-requirement verdicts — pass, partial, and fail statuses stated per requirement class, including the ones that fail today.
- Honest-claim ledger — every claim that exceeded shipped code, withdrawn or scoped; the maximal defensible claim per primitive.
Its verdict and both load-bearing tables already ship, unsoftened, on /trust — including the sentence that says the dossier is not signable today.
Read why the text is absent
One ruling is open: whether the dossier publishes here as full text with a cryptographic digest of the source, or as a structured summary. A summary shipped under a verbatim label would be a fabrication; full text shipped before its digest and date are fixed would be unverifiable. So the page states the absence instead.
Dossier text — absent by rule, not by accident
Unlocks when the publication-mode ruling lands. If full text: the complete dossier renders here with a SHA-384 digest of its source. If summarized: the summary is labeled a summary, and the digest still publishes.
- Artifact
- Consolidated pre-evaluation dossier, versioned in the tree.
- Verdict today
- Ready to enter formal evaluation; not signable before the code-closed cluster lands and an accredited lab attests.
- Already public
- The closing verdict, the honest-claim ledger, and the deviation register — on /trust, verbatim.
- Unlocks
- The publication-mode ruling; then text or labeled summary, plus digest and date.
03Meanwhile — what an evaluator reads today
Evaluate on what is already public.
I am evaluating now — what do I read?
Read /trust top to bottom: the posture wording is canonical, the claim ledger is the dossier’s own table, and the methodology register traces every published number. Then start intake at /procurement — the kit ships pinned sources with file-and-line citations for independent verification.
Can I get the dossier under evaluation terms?
Ask through the procurement intake and say so plainly. Evaluation-scoped disclosure is a conversation with an engineer, not a download link pretending the ruling already happened.