Nothing publishes without a recorded human approval.

This UI calls the TRUST-001 backend gate. The acting principal must be in-tenant, hold trust_center:publish, and record an explicit approval decision before the snapshot is exposed.

Start the FastAPI service with make api to publish live snapshots.

Access policyApproval noteI approve publishing this readiness snapshot. It is readiness evidence, not a certificate.

Control curation

Published controls

6 selected for this snapshot.

AC-1MFA on privileged and remote accessASM-1Asset inventory maintainedDP-1Data protection and tested backupsGOV-1Cybersecurity governance and ownershipIR-2Incident response capability is testedLOG-1Central security logging

No published snapshot yet.

Use the approval gate above to create the first immutable Trust Center snapshot.