Contact: security@sovereignstack.ai PGP Key: Available at keys.sovereignstack.ai
| Subsystem | Supported |
|---|---|
| ss-core | ✓ |
| ss-identity | ✓ |
| ss-sessiond | ✓ |
| ss-bus | ✓ |
| ss-cas | ✓ |
| ss-federation | ✓ |
| ss-trust | ✓ |
| ss-kas | ✓ |
| ss-reason | ✓ |
| ss-lineage | ✓ |
| ss-capability | ✓ |
| ss-swarm | ✓ |
| ss-scheduler | ✓ |
- Agent Impersonation — Mitigated by cryptographic identity
- Capability Escalation — Mitigated by strict capability boundaries
- Data Tampering — Mitigated by Merkle provenance chains
- Sybil Attacks — Mitigated by reputation + stake mechanisms
- Eclipse Attacks — Mitigated by diverse peer discovery
- Supply Chain — Mitigated by signed releases and reproducible builds
- Replay Attacks — Mitigated by nonce/timestamp checks
- Side Channel — Mitigated by constant-time crypto primitives
- All code reviewed
- All commits signed
- Dependencies scanned automatically
- Fuzzing on critical parsers
- Regular third-party audits
- Bug bounty program
- Triage (within 1 hour)
- Containment
- Root Cause Analysis
- Patch & Release
- Post-Mortem (published publicly)