01

Public trust report.

A sanitized, machine-generated summary of what the control matrix currently proves. It exposes counts and boundaries, not implementation paths or reviewer-only evidence mappings.

02

Control substantiation

Total controls 177
Last validated 2026-05-23T16:36:32Z
Substantiated by code tests 148

83.6%

Substantiated by dated live evidence 16

9.0%

Substantiated by external fact 13

7.3%

Unspecified pending 0

0.0%

03

What this report does not prove

This section follows the boundaries in docs/claims-boundary.md. The public trust report is a summary artifact, not a certification or regulator approval.

  • Independent external audit or certification
  • Hardware-backed WORM immutability
  • Production-wide coverage for every tenant and every historical record
  • HSM-backed custody for every signing/integrity secret
  • Regulator approval
04

Machine-readable artifact

Automated reviewers can consume the JSON version. The totals object is copied from docs/generated/control_matrix.json so count drift is detectable with jq.

curl -s https://datasitr.com/resources/trust-report.json | jq '.totals'
Open JSON · Open public matrix summary · Request reviewer bundle