Theater

certifiedClaim is false. On purpose.

We refuse the letter we do not have. A pack generated from SHIP gates is not a Type II letter. If the collector key is empty, the badge is empty. Honesty 10 is not certificate 10.

No SOC2 Type II, FedRAMP ATO, HIPAA BAA, or contractual 99.99% credits are claimed. Papers in Command Center are analogs. 3PAO stays EXTERNAL.

No performance, compatibility, or non-infringement promises beyond the labeled analog on a named host. Benchmarks are method-first.

Journal detects. It does not prevent a DBA. Enclaves are not this product.

What we will stand behind today

MFA/SSO, CMEK, WORM SIEM, published RPO/RTO, and a 24/7 SOC are leftover or refused until they actually exist. The full map is the security packet.

Six buyer controls · leftover-honest

LIVE

Tenant fence

One paid SKU is one tenant. Queries and COMMITs are fenced to that tenant.

LIVE

TLS on this origin

Traffic to veloce.tuce.app is TLS. Browser /tools never upload the dump.

LIVE

Customer-held VERIFY

Two JSON files, recomputed in /tools/verify. Not QLDB. Not Raft.

leftover

CrowdStrike / Splunk / Duo

We do not sell those binaries. SHOW SECURITY names each leftover.

leftover

3PAO pen-test letter

Pack ≠ letter. Type II opinion stays null until an auditor writes one.

N/A

MFA on someone else's login

We do not operate SQL Server or Oracle IdP. MFA on their login is not our row.

Pack 17 analog leftover posts an SLSA analog L1 JSON next to SHA256SUMS. That is not a Type II letter and not a host kernel bump. CLI leftover plants stay named EXTERNAL.

Compare leftover stamps → · What's New leftover column →