Independent qualification calls
These gates remain bound to immutable v3.4.2 evidence so outside assessors can evaluate one exact release without the target moving. They are not statements that v3.4.2 remains the current deployment release.
Independent failures, limitations and negative findings are useful evidence.
6dfa3d6cc738d9369cf092d2782676bf4f2a46e4 · tree f90bf74e29899f82d0a4ee321604346241bba4de. Qualification evidence may accumulate after release; the immutable target is not rewritten.Frozen v3.4.2 gates
Hardware-backed sovereign key custody
Qualify TPM 2.0, PIV/YubiKey, HSM, Secure Enclave or equivalent non-exportable key custody with restart and fail-closed evidence.
Physical multi-host qualification
Run the frozen release on physically separate hosts, exchange and verify signed ENTITY material bidirectionally, then exercise restart/recovery and a negative case.
Certified-device pilot
Execute a representative ENTITY workflow on hardware with independently documented certification or validation such as FIPS or Common Criteria.
Independent security audit
Audit the frozen v3.4.2 release, document scope/methodology/findings, use responsible disclosure for sensitive issues, and hash the final report.
Independent assessor receipt
Review the complete frozen evidence package, validate provenance/hashes, classify gates without waiving missing evidence, and issue a signed/hash-bound assessment receipt.
Common evidence controls
- No modification of the frozen v3.4.2 target.
- No access to BTG private signing material is required.
- Evidence should be reproducible or independently reviewable.
- Evidence artifacts should be cryptographically hashed.
- Participants should disclose material relationships with BTG.
- Passing one gate does not imply passing another.
- Failures and incomplete results must be preserved rather than rewritten as passes.
Why these calls remain public
GitHub provides timestamped discussion history, attributable participants, linked repositories/commits, CI evidence and a public chain of review. The objective is not to create the appearance of validation; it is to recruit unrelated parties who can produce evidence BTG cannot legitimately self-issue against the exact frozen target.