TrustHub · Evidence

Proof you can inspect.
Gaps you can see.

This index separates published evidence, internal records, passed tests and open reviews. A prepared package is not an external approval, and a passing test is not a certification.

evidence status
PublishedBenchmarks and coverageinspect
PassedWindows runnerscoped
PreparedSecurity and conformancenot reviewed
OpenCustomer corpusnot claimed

Index

Every item has a status.

Use the status to decide what you can rely on today. Raw internal packages are available only after scope and confidentiality are agreed.

Published

Recorded benchmark studies

Dated studies with input, output, method, revision, environment and limitations. Wins and losses are shown in place.

Open the evidence explorer
Published

Workload coverage matrix

The class-by-class matrix, including samples, mode and measured outcome. It does not claim that every class compresses.

Open the coverage matrix
Internal record

Saar Bundle v1 gate record

The machine-readable gate record covers independent reading, large bundles, Windows, fuzzing, security review, third-party review and the representative corpus.

Review the posture
Passed

Windows validation

The GitHub-hosted Windows runner passed bundle extraction, symlink, reserved-name, collision and type-check suites. It is not a customer Windows environment.

Read the boundary
Internal record

Fuzzing and negative vectors

Deterministic mutation, truncation, append, malformed-index, payload-kind, duplicate-path and stream-aware checks are part of the internal verification record.

Review security boundaries
Prepared, not reviewed

Conformance package

A candidate reader and writer checklist exists. No third-party implementer review has been returned or is claimed.

Review open status
Prepared, not reviewed

Security review package

Scope, assets, boundaries, threats and review questions are documented. No independent security review has been completed or is claimed.

Review security
Open

Representative customer corpus

The public corpus is local or synthetic proxy data. A customer-representative corpus, with written permission, remains open.

Read the compliance posture

Request a scoped evidence package

For raw benchmark records, the Bundle gate record, the conformance package or the security review package, contact saar-security@heossi.com. Access and confidentiality are agreed in writing.