Vendor Security
vendor_securitySTANDARD readiness evidence pack
STANDARD PROOFLast updated: 2026-02-22
Library proof sets: STANDARD per-pack outputs
This page publishes deterministic readiness evidence packs per library. It does not claim certification issuance.
Golden self-audit remains one canonical STANDARD run. Per-pack folders below show what each library actually outputs.
Policy
Frameworks are tracked. Libraries are versioned. Updates ship with changelogs.
Each pack declares its framework source + version, plus pack version and last updated date.
Uncut proof-run (2 minutes)
No narration. No cuts. Viewer + CLI + JSON artifact on screen.
STANDARD library proof folders
ISO 27001
iso_27001STANDARD readiness evidence pack
NIST CSF
nist_csfSTANDARD readiness evidence pack
SOC2 Readiness
soc_2STANDARD readiness evidence pack
DFIR Incident Response
dfirSTANDARD incident response readiness evidence pack
Golden Self-Audit (STANDARD)
The golden set is the canonical STANDARD example run and remains available for replay.
- DecisionPack.pdf
Golden STANDARD PDF example (single canonical run).
- DecisionPack.html
Golden browser review surface.
- DecisionPack.manifest.json
Golden artifact manifest and metadata.
- DecisionPack.seal.json
Golden deterministic seal.
- verify.json
Verifier output; expected ok=true.
- pack.zip
Golden canonical archive.
- SHA256.txt
Golden checksum list.
How to verify (PowerShell)
- Choose a pack slug and download
pack.zip,verify.json, andSHA256.txt. - Confirm SHA256 for
pack.zip. - Confirm
verify.jsonreportsok: true.
$slug = "soc2-readiness"
$base = "https://www.civitasanalytica.com/proof/packs/$slug"
Invoke-WebRequest "$base/pack.zip" -OutFile .\pack.zip
Invoke-WebRequest "$base/verify.json" -OutFile .\verify.json
Invoke-WebRequest "$base/SHA256.txt" -OutFile .\SHA256.txt
Get-FileHash .\pack.zip -Algorithm SHA256
Select-String -Path .\SHA256.txt -Pattern "pack.zip"
($v = Get-Content .\verify.json -Raw | ConvertFrom-Json).okArchive / Lite (legacy)
- DFIR Litedfir-lite - Alias preserved for compatibility; canonical STANDARD pack is dfir.
Metadata and identity
Pack identity is published in DecisionPack.manifest.json under pack_meta.
Stable fields include pack_type, library, client, and engagement.