EthosGate

Security & trust

Security claims stay bounded to implementation

EthosGate applies server-side authorization checks to workspace functions and fail-closed invariant rules. The current implementation has meaningful limitations that remain visible.

Current scope
  • The Content Security Policy removes unsafe-eval. unsafe-inline remains for Next.js runtime inline bootstrap and style output; a nonce-based policy has not yet been implemented.
  • No live provider credentials, provider contract tests, signed enforcement service, or production integration is configured.
  • Ledger linking is not claimed immutable, externally verified, or cryptographic; external PostgreSQL/RLS/pgvector, object storage, queues, and production monitoring are not configured.
Research provenance

Aleksandar Rodić - Founder of the Conscience by Design Initiative and Author of Machine Conscience (2025). Licensed under CC BY 4.0.

Zenodo archival and citation record Open the authenticated workbench