01

Public trust report.

A sanitized, machine-generated summary of what the control matrix currently proves. It exposes the same control count as the internal matrix, plus boundaries, without implementation paths or evidence-path details.

02

Control substantiation

Total controls 181
Last validated 2026-06-18T16:50:38Z
Substantiated by code tests 152

84.0%

Substantiated by dated live evidence 16

8.8%

Substantiated by external fact 13

7.2%

Unspecified pending 0

0.0%

03

What this report does not prove

This section follows the boundaries in docs/claims-boundary.md. The public trust report is a summary artifact, not a certification or regulator approval.

  • Independent external audit or certification
  • Hardware-backed WORM immutability
  • Production-wide coverage for every tenant and every historical record
  • HSM-backed custody for every signing/integrity secret
  • Regulator approval
04

Machine-readable artifact

Automated reviewers can consume the JSON version. The totals object is copied from docs/generated/control_matrix.json so count drift is detectable with jq.

curl -s https://datasitr.com/resources/trust-report.json | jq '.totals'
Open JSON · Open public matrix summary · Request reviewer bundle