Security
Security
What the product does today, stated plainly. We don't publish certification or audit claims until they're real.
How your data is kept
HistoryAppend-only. Nothing an agent writes is edited or deleted in place; corrections are new entries.
Tamper-evidentEvery event is fingerprinted and linked to the one before it, so a rewritten or rolled-back history shows up. How that works.
EncryptionThe contents of every event are encrypted with AES-GCM before they are stored.
IsolationEach store runs as its own Stellar Jay process with its own data key and credentials.
AttributionEvery write is tied to the credential that made it. Credentials carry reader, writer or admin roles.
Open sourceThe store is public under AGPL-3.0-or-later, so you can inspect it or run it yourself. Stellar Jay on GitHub.
What we don't claim
AvianSuite has no third-party security certification or audit yet. We'll add them here when we have them, not before.
Reporting an issue
Found a security problem? Email kyle@futureperfect.work. Please don't open a public issue for it.