{"ok":true,"domain":"c2pa.xenlook.com","ca_reachable":false,"sources":{"report":"snapshot","dashboard":"none"},"report_stale":true,"report_age_hours":698.8,"dashboard":{"metrics":{"certs_issued":0,"certs_active":0,"certs_revoked":0,"audit_events":147,"crl_available":true},"trust":{"score":74,"grade":"C","reliability":"pilot","gating_blockers":["webtrust"],"pre_audit_label":"Pre-audit readiness index (not WebTrust / Trust List equivalence)","methodology":"70% operational tests + 30% DigiCert process parity (excludes WebTrust + CP-optional CRL). readiness_index = round(0.70×operational + 0.30×parity); when gating_blockers non-empty apply cap=min(computed, 74) — cap_value=74. Active gating_blockers are listed in gating_blockers[]. Gating candidates (tier 미달 시 적용): webtrust, hsm_keys, key_ceremony, ocsp."},"operational":{"total":60,"passed":60,"failed":0,"score":100,"duration_ms":1922},"last_test_run":"2026-09-05T11:00:03.918Z","benchmark_parity_score":100},"report":{"version":1,"generated_at":"2026-09-05T11:00:03.918Z","ca_name":"XenLook C2PA Certification Authority (KR)","ca_phase":"CA-2","mode":"pilot","trust_list":false,"operational":{"total":60,"passed":60,"failed":0,"score":100,"duration_ms":1922,"tests":[{"duration_ms":1,"id":"ca_health","name":"CA service health","category":"infrastructure","passed":true,"weight":10,"evidence":"HTTP 200 1ms"},{"duration_ms":0,"id":"ca_status","name":"CA status API","category":"infrastructure","passed":true,"weight":8,"evidence":"{\"service\":\"c2pa-ca-service\",\"mode\":\"pilot\",\"phase\":\"CA-2\",\"pilot_ready\":true,\"kms_ready\":true,\"kms_signer_wire\":\"wired\",\"pilot_store\":\"pilot certificate store\",\"trust_list\":false,\"disclaimer\":\"KMS si"},{"duration_ms":0,"id":"pilot_pki","name":"Pilot PKI chain present","category":"infrastructure","passed":true,"weight":12,"evidence":"pilot certificate store"},{"duration_ms":0,"id":"chain_verify","name":"Intermediate signed by root","category":"infrastructure","passed":true,"weight":10,"evidence":"openssl verify OK"},{"duration_ms":15,"id":"csr_validate","name":"CSR validation (ES256)","category":"issuance","passed":true,"weight":8,"evidence":"C = KR, O = XenLook Inc., OU = XENLOOK Media Pipeline, CN = XenLook CA OpTest"},{"duration_ms":4,"id":"csr_reject_invalid","name":"Invalid CSR rejected","category":"issuance","passed":true,"weight":5},{"duration_ms":48,"id":"cert_issue","name":"Claim-signing cert issuance","category":"issuance","passed":true,"weight":15,"evidence":"serial=391420056726…"},{"duration_ms":0,"id":"crl_pem","name":"CRL PEM available","category":"revocation","passed":true,"weight":8,"evidence":"471 bytes"},{"duration_ms":0,"id":"crl_http","name":"CRL HTTP endpoint","category":"revocation","passed":true,"weight":7,"evidence":"HTTP 200"},{"duration_ms":11,"id":"ocsp_status","name":"OCSP-style cert status","category":"revocation","passed":true,"weight":6,"evidence":"{\"status\":\"good\",\"serial\":\"391420056726C7F91F44966E1968800AD3137E67\",\"updated_at\":\"2026-09-05T11:00:02.080Z\",\"rfc6960_de"},{"duration_ms":0,"id":"ocsp_rfc6960_der","name":"RFC6960 OCSP DER response","category":"revocation","passed":true,"weight":3,"evidence":"/api/ca/v1/ocsp/{serial}/der"},{"duration_ms":0,"id":"ocsp_external_semantic","name":"OCSP external semantic (GET+POST openssl)","category":"revocation","passed":true,"weight":4,"evidence":"local=true public=true post=true"},{"duration_ms":0,"id":"audit_log","name":"Issuance audit log","category":"governance","passed":true,"weight":8,"evidence":"147 events"},{"duration_ms":0,"id":"cps_document","name":"CPS document published (v1.0)","category":"governance","passed":true,"weight":5,"evidence":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-CPS.md"},{"duration_ms":0,"id":"incident_runbook","name":"48h incident runbook","category":"governance","passed":true,"weight":6,"evidence":"docs/C2PA/03-운영/C2PA-CA-INCIDENT-RUNBOOK.md"},{"duration_ms":0,"id":"incident_tabletop_drill","name":"48h incident tabletop drill log","category":"governance","passed":true,"weight":5,"evidence":"entries=2"},{"duration_ms":0,"id":"media_sign_e2e","name":"C2PA media sign E2E (pilot chain)","category":"signing","passed":true,"weight":12,"evidence":"ephemeral CA artifact"},{"duration_ms":0,"id":"production_media_sample","name":"Production media org-issuer sample","category":"signing","passed":true,"weight":8,"evidence":"100%"},{"duration_ms":6,"id":"cert_revoke","name":"Certificate revocation","category":"revocation","passed":true,"weight":10,"evidence":"391420056726…"},{"duration_ms":0,"id":"observatory_headers","name":"Observatory security headers","category":"infrastructure","passed":true,"weight":6,"evidence":"strict-transport-security, content-security-policy, x-content-type-options"},{"duration_ms":1,"id":"api_latency","name":"Health API latency < 500ms","category":"infrastructure","passed":true,"weight":4,"evidence":"1ms"},{"duration_ms":0,"id":"prometheus_metrics","name":"Prometheus /metrics","category":"infrastructure","passed":true,"weight":4,"evidence":"HTTP 200"},{"duration_ms":0,"id":"readiness_audit","name":"Internal readiness audit SSOT","category":"governance","passed":true,"weight":6,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"kms_registry","name":"GCP KMS registry (Seoul)","category":"governance","passed":true,"weight":5,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"legal_gate","name":"LEGAL-GATE items passed","category":"governance","passed":true,"weight":6,"evidence":"7/10 pass"},{"duration_ms":3,"id":"load_concurrent_10","name":"Concurrent health x10 p50 < 500ms","category":"infrastructure","passed":true,"weight":5,"evidence":"p50=3ms"},{"duration_ms":0,"id":"practices_page","name":"Public practices / SLA page","category":"governance","passed":true,"weight":4,"evidence":"c2pa.xenlook.com/practices"},{"duration_ms":0,"id":"ca2_intake_package","name":"CA-2 intake EOI package","category":"governance","passed":true,"weight":4,"evidence":"CA compliance package"},{"duration_ms":0,"id":"trust_list_csr","name":"Trust List claim-signing CSR","category":"governance","passed":true,"weight":4,"evidence":"Trust List CSR package"},{"duration_ms":0,"id":"ca2_progress_registry","name":"CA-2 progress registry","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"sslcom_benchmark","name":"SSL.com institutional benchmark SSOT","category":"benchmark","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"fleet_benchmark","name":"5-CA fleet benchmark SSOT","category":"benchmark","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"admin_console","name":"CA admin console page","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/admin"},{"duration_ms":0,"id":"subscriber_apply","name":"Subscriber certificate application","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/subscribers/apply"},{"duration_ms":0,"id":"subscriber_hub","name":"Subscriber journey transparency hub","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/subscribers"},{"duration_ms":0,"id":"ca_repository","name":"CA public repository page","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/repository · data-c2pa-route=repository"},{"duration_ms":0,"id":"repository_api","name":"Repository manifest API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/repository"},{"duration_ms":0,"id":"public_openapi","name":"Public OpenAPI spec","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/openapi.json"},{"duration_ms":0,"id":"public_sla_api","name":"Public SLA metrics API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/sla"},{"duration_ms":0,"id":"public_journey_api","name":"Public subscriber journey API + review metrics","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/journey"},{"duration_ms":0,"id":"public_audit_summary_api","name":"Public RA audit summary API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/audit-summary"},{"duration_ms":0,"id":"score_100_progress","name":"SSL.com gap tracker (public scoreboard retired)","category":"benchmark","passed":true,"weight":2,"evidence":"/api/ca/public/progress → 410 · gap-tracker SSOT"},{"duration_ms":0,"id":"fleet_benchmark_api","name":"5-CA fleet benchmark API","category":"benchmark","passed":true,"weight":2,"evidence":"/api/ca/public/benchmark-fleet"},{"duration_ms":0,"id":"developers_page","name":"Developers / OpenAPI page","category":"governance","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/developers"},{"duration_ms":0,"id":"progress_page","name":"Progress readiness page (live marker)","category":"benchmark","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/progress · data-c2pa-route=progress · not landing hero"},{"duration_ms":0,"id":"transparency_page","name":"Transparency page (live marker)","category":"governance","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/transparency · data-c2pa-route=transparency"},{"duration_ms":0,"id":"tsa_stub_api","name":"TSA pilot stub API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/v1/tsa"},{"duration_ms":0,"id":"intake_manifest","name":"Trust List intake manifest API","category":"governance","passed":true,"weight":3,"evidence":"/api/ca/public/intake · /intake"},{"duration_ms":0,"id":"ra_status_api","name":"RA operations status API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/ra-status"},{"duration_ms":0,"id":"kms_dry_run_registry","name":"KMS dry-run registry","category":"governance","passed":true,"weight":2,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"webtrust_status_honest","name":"WebTrust status not mislabeled as audit pass","category":"benchmark","passed":true,"weight":2,"evidence":"webtrust=planned"},{"duration_ms":0,"id":"benchmark_engineering_100","name":"Non-WebTrust benchmark practices at 100% parity (informational)","category":"benchmark","passed":true,"weight":0,"evidence":"all non-webtrust at 100%"},{"duration_ms":0,"id":"ra_automation_registry","name":"RA automation registry (auto-issue + notifications)","category":"governance","passed":true,"weight":2,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"approve_and_issue_module","name":"Approve-and-issue combined endpoint module","category":"governance","passed":true,"weight":2,"evidence":"POST /api/ca/v1/applications/:id/approve-and-issue"},{"duration_ms":0,"id":"certificate_delivery_api","name":"Subscriber certificate delivery + badge API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/certificate/:id · badge.svg"},{"duration_ms":0,"id":"subscriber_workflow_ui","name":"End-to-end subscriber hub + track certificate card","category":"governance","passed":true,"weight":2,"evidence":"/subscribers · CaSubscribersHubClient · CaWorkflowPageClient · CaCertificateCard"},{"duration_ms":0,"id":"ra_digest_script","name":"RA digest script for agent ops","category":"governance","passed":true,"weight":1,"evidence":"pnpm c2pa:ca:ra-digest"},{"duration_ms":0,"id":"apac_issuance_system","name":"APAC issuance system registry + manual path","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal) · KR/JP phased · G5 external lock aware classify"},{"duration_ms":0,"id":"ca_legal_system","name":"CA standalone legal registry + public API","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal) · /legal hub"},{"duration_ms":0,"id":"xmse_signing_ssot_bound","name":"XMSE signing SSOT bound to CA pilot subscriber cert","category":"signing","passed":true,"weight":3,"evidence":"issuer=C = KR, O = XenLook Inc., OU = C2PA Issuing CA Pilot, CN = XenLook C2PA I"}]},"benchmark":{"reference":"DigiCert","parity_score":92.6,"engineering_parity_score":100,"practices":[{"id":"cps","name":"Certificate Policy / CPS published","digicert_summary":"Public CPS and subscriber agreements","xenlook_status":"cps_public","parity_pct":100,"weight":8},{"id":"ra_identity","name":"Registration Authority identity verification","digicert_summary":"Org validation before claim-signing cert issuance","xenlook_status":"ra_api_enforced","parity_pct":100,"weight":10},{"id":"cpl_gate","name":"CPL conformance gate before issuance","digicert_summary":"Generator Product CPL snapshot required","xenlook_status":"enforced_api","parity_pct":100,"weight":10},{"id":"hsm_keys","name":"Root / issuing key in HSM or KMS","digicert_summary":"FIPS 140-2 Level 3 HSM","xenlook_status":"kms_provisioned","parity_pct":100,"weight":12},{"id":"key_ceremony","name":"Dual-control key ceremony","digicert_summary":"M-of-N ceremony for root","xenlook_status":"ceremony_recorded","parity_pct":100,"weight":8},{"id":"crl_distribution","name":"CRL publication endpoint (CP OPTIONAL)","digicert_summary":"HTTP CRL + OCSP responders","xenlook_status":"crl_http","parity_pct":100,"weight":0},{"id":"ocsp","name":"OCSP responder","digicert_summary":"OCSP for end-entity certs","xenlook_status":"ocsp_responder","parity_pct":100,"weight":7},{"id":"revocation_sla","name":"Revocation processing SLA","digicert_summary":"24h subscriber cert revoke target","xenlook_status":"api_automated","parity_pct":100,"weight":8},{"id":"incident_48h","name":"C2PA 48h key-compromise notice","digicert_summary":"[external contact] process","xenlook_status":"incident_drilled","parity_pct":100,"weight":10},{"id":"audit_log","name":"Issuance / revocation audit trail","digicert_summary":"Immutable RA audit logs","xenlook_status":"audit_hash_chain","parity_pct":100,"weight":9},{"id":"transparency","name":"Public transparency / status page","digicert_summary":"Status + practice disclosures","xenlook_status":"live","parity_pct":100,"weight":9},{"id":"webtrust","name":"WebTrust / ETSI audit","digicert_summary":"Annual third-party audit","xenlook_status":"planned","parity_pct":25,"weight":10}]},"trust":{"score":74,"grade":"C","reliability":"pilot","gating_blockers":["webtrust"],"pre_audit_label":"Pre-audit readiness index (not WebTrust / Trust List equivalence)","methodology":"70% operational tests + 30% DigiCert process parity (excludes WebTrust + CP-optional CRL). readiness_index = round(0.70×operational + 0.30×parity); when gating_blockers non-empty apply cap=min(computed, 74) — cap_value=74. Active gating_blockers are listed in gating_blockers[]. Gating candidates (tier 미달 시 적용): webtrust, hsm_keys, key_ceremony, ocsp."},"metrics":{"subscriber_certs_issued":0,"subscriber_certs_active":0,"subscriber_certs_revoked":0,"test_certs_issued":0,"test_certs_revoked":0,"internal_pilot_certs_issued":0,"external_subscriber_certs_issued":0,"audit_events":147,"crl_available":true,"media_org_signed_pct":100}},"benchmark":null,"legal_gate":{"legal_review_completed":true,"reviewer_count":2,"licensed_counsel":false},"history":[],"generator":{"fetched_at":"2026-10-04T13:50:33.157Z","generator":{"product":"XENLOOK Media Pipeline","product_version":"5.0","record_id":"019ec04e-17ef-76ef-ad31-60ebb0c0a6a8","phase":"scott_remediation_4_final_send","implementation_class":"Backend","max_assurance_level":1,"company_agreement_signed_at":"2026-06-13","rfi_sent_at":"2026-06-14","submission_date":"2026-06-14","submission_summary":"Scott remediation #4 final — flat ZIP 27 files; PDF ingest Valid with embedded parent manifest; 5/8 TL interop parents; portal synced 2026-06-23","evidence_generate":"8/8","evidence_ingest":"8/8","evidence_size_mb":21,"mime_types":["image/jpeg","image/png","image/webp","video/mp4","audio/mpeg","audio/wav","audio/mp4","application/pdf"],"mime_count":8,"submission_audit_pass":true,"submission_audit_at":"2026-06-22","media_counts":{"images_signed":10544,"videos_signed":12220,"org_issuer_pct":100,"verify_paths_total":22764},"media_verified_at":"2026-06-13","media_counts_live":false,"media_counts_source":"snapshot","disclosure":"Pilot certificate chain is Pre–Trust List. CPL and Trust List listing not claimed.","cpl_listed":false,"trust_list_listed":false},"ca":{"agreement_signed":true,"agreement_signed_at":"2026-06-13","intake_submitted_at":"2026-06-15","supplemental_submitted_at":"2026-06-18","supplemental_note":null,"phase":"ca_agreement_signed","trust_list":"awaiting_approver_queue","trust_list_listed":false,"legal_gate":{"version":5,"updated":"2026-08-03","ca_trust_list_phase":"ca_intake_form_submitted","ready_for_ca_agreement":true,"ssot":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-LEGAL-GATE.md","who_does_what":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-LEGAL-GATE-WHO-DOES-WHAT.md","l1_l8_package":{"internal_package_ready":true,"ceo_signature_pending":true,"external_counsel_pass_forbidden_without_evidence":true,"note_ko":"초안·셀프서트·리스크수용 문서 준비됨. L1/L8 pass는 CEO 서명 또는 외부 법무 증거 후에만."},"items":[{"id":"L1","name":"외부 법무 검토","owner":"CEO","status":"academic_review_complete","package_status":"ready_for_ceo_self_cert_or_counsel","note":"Internal package ready (CEO self-cert + academic advisory). Licensed counsel sign-off still pending — do NOT mark pass without evidence.","doc":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-CEO-SELF-CERTIFICATION-L1.md","checklist":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-LEGAL-REVIEW-MEMO-DRAFT.md","ai_opinion_date":"2026-06-12","ai_verdict":"conditional_sign","pre_sign_blockers":["gcp_cloud_hsm","ca_agreement_termination_crl_period","ceo_self_cert_l1"],"academic_review_at":"2026-06-13","updated_at":"2026-08-03"},{"id":"L2","name":"면책 범위 이해","owner":"CEO","status":"pass","note":"Implicit in DocuSign execution 2026-06-13"},{"id":"L3","name":"CPS 초안 CEO 승인","owner":"CEO","status":"pass","note":"CPS v1.0 + c2pa.xenlook.com/practices"},{"id":"L4","name":"CA-1 파일럿 완료","owner":"CPO","status":"pass","note":"operational tests 37/37 · maturity 100"},{"id":"L5","name":"공개 사이트 감사","owner":"CPO","status":"pass","note":"c2pa.xenlook.com transparency"},{"id":"L6","name":"개인정보 처리방침","owner":"CEO","status":"pass","note":"practices + xenlook.com/privacy"},{"id":"L7","name":"요금·SLA 초안","owner":"CEO","status":"pass","note":"c2pa.xenlook.com/practices SLA section"},{"id":"L8","name":"사이버 E&O 보험","owner":"CEO","status":"risk_acceptance_ready","package_status":"ready_for_ceo_signature","note":"EO risk acceptance draft ready — CEO signature required for L8 pass. Insurance optional until 2026-09-30. Do NOT mark pass without signed draft or policy number.","doc":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-EO-RISK-ACCEPTANCE-DRAFT.md","ceo_approval_draft":"docs/컴플라이언스/CEO-APPROVAL-DRAFT-L8-EO-RISK.md","external_issuance_blocker":"G1 Trust List + G2 KMS live + L8 signed","updated_at":"2026-08-03"},{"id":"L9","name":"대표이사 서면 승인","owner":"CEO","status":"pass","note":"CEO written approval executed via DocuSign — CA Agreement 2026-06-13","doc":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-CEO-APPROVAL-FINAL.md","signed_at":"2026-06-13"},{"id":"L10","name":"C2PA CA Trust List Intake","owner":"CPO","status":"ready","note":"CA compliance package + docs/C2PA/02-CA-컴플라이언스/C2PA-CA-INTAKE-PORTAL-SUBMIT.md","submitted_at":"2026-06-15","submitted_by":"ceo@xenlook.com"},{"id":"L10G","name":"Generator Product Conformance RFI","owner":"CPO","status":"generator_rfi_submitted","note":"RFI package emailed to [external contact] 2026-06-14 — Appendix C v4.0, 131/131 PASS, evidence ZIP","submitted_at":"2026-06-14","doc":"docs/C2PA/02-CA-컴플라이언스/C2PA-GENERATOR-SUBMISSION-FINAL.md"}],"solo_operator":true,"external_counsel_required":false,"solo_ssot":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-SOLO-OPERATOR-PATH.md","academic_reviews":[{"name":"Nam Hyun-woo","name_ko":"젠룩의장","affiliation":"Seokyeong University · Content System Design","scope":"C2PA CA technical governance · AI harness · operational risk","reviewed_at":"2026-06-13","doc":"C2PA-CA-LEGAL-REVIEW-MEMO.md","is_licensed_counsel":false},{"name":"Yang Yeon-kyung","name_ko":"양연경","affiliation":"Sangmyung University · Content Creative Lab","scope":"Content provenance · public policy · Generator+CA dual role","reviewed_at":"2026-06-13","doc":"C2PA-CA-LEGAL-REVIEW-MEMO.md","is_licensed_counsel":false}],"ca_agreement_signed":true,"ca_agreement_signed_at":"2026-06-13","ca_agreement_document":"C2PA Certification Authority Agreement v1.0 (6-4-2025)","ca_agreement_signer":"Ho-Yeon Nam, CEO, XenLook Inc.","ca_agreement_channel":"DocuSign","ca_agreement_counterparty":"JDF Projects, LLC (C2PA)","generator_conformance_phase":"generator_rfi_submitted","supplemental_evidence":{"pki_lint":"CA compliance package","key_generation_script":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-KEY-GENERATION-SCRIPT.md","witness_signoff":"complete","scott_reply_ssot":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-INTAKE-FORM-REPLY-SCOTT.md","pki_lint_result":"23/23 PASS","keygen_signed_pdf":"docs/컴플라이언스/signed/C2PA-CA-KEYGEN-001-SIGNED.pdf","witness":"Jong-Weon Kim jwkim@smu.ac.kr","pem_resubmit_sent_at":"2026-06-18","pem_resubmit_ssot":"docs/C2PA/02-CA-컴플라이언스/C2PA-CA-PEM-RESUBMIT-SCOTT-SEND.md","pem_resubmit_pack":"data/compliance/send-2026-06-18-ca-pem-resubmit"}}},"dual_track_disclosure":"XenLook operates CA and Generator programs under executed C2PA agreements. Trust List and CPL listing are not claimed until C2PA confirms."},"fetched_at":"2026-10-04T13:50:33.157Z"}