Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing TLS
Both ends prove who they are: validated TLS for people, mutual TLS and pinned keys for machines
AO coverage. Addresses the single Communications Authenticity objective for the session types in scope: user-to-application, application-to-application, and administrative. User-to-application.…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet- SC.L2-3.13.8[a] [c]
Every CUI transmission path is cryptographically protected; no physical-safeguard alternative claimed
AO coverage. Claims objectives [a] and [c] — identifying the cryptographic mechanisms and implementing them for CUI in transit. Objective [b] (identify alternative physical safeguards) is not…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet