ENTITY documentation
Security Manual
Signing, revocation, provider-capture resistance, backup security, evidence threats and vulnerability reporting.
Security documentation describes protocol and operational controls. Independent security review remains a separate external qualification boundary.
Documents
Signing KeysKey custody and signing boundariesRevocation & RotationKey and authority lifecycle controlsProvider CaptureResistance to infrastructure becoming authorityBackup SecurityProtected-state and recovery controlsEvidence ThreatsTamper and evidence-boundary threatsSecurity ReportingVulnerability reporting path