KORDESSA / SECURITY OVERVIEW
Security overview
A bounded description of safeguards and limitations in the current private controlled preview.
Current behavior
Access and identity
Sites access is custom, owner-only, and capped at one authorized account. The beta binding is stored only as an opaque SHA-256 identity and cannot invite or admit another participant.
Customer roles remain structurally separate from Sites and Program Control roles. Tenant authorization is deny-by-default; session material is opaque and one-way hashed at rest.
Current behavior
Execution and evidence
Bounded inputs, content-addressed artifacts, optimistic transitions, append-only redacted audit, immutable evidence, and independent review preserve lineage.
The seven blueprint tools are private, scope-bound, deterministic where applicable, and fail closed when production OAuth issuer configuration is unavailable. Submissions remain held and not started.
Current constraint
External boundaries
Commercial/provider authority, public authentication, production billing, customer jobs, analytics, and external submission are inactive. No page or tool can activate them.
Google SPF and DMARC are observed; Google DKIM remains provider-pending. This page performs no DNS or provider mutation.
UNAVAILABLE TODAY
Not represented as active
- Security certification or independent assurance report
- Public vulnerability-disclosure workflow
- Service-level or incident-response commitment
- Active customer, billing, model, email, or analytics provider authority