Security architecture

Appendix C — Generator Product Security

Target of Evaluation: XENLOOK Media Pipeline backend implementation class, Assurance Level 1.

Public security architecture summary — universal, intentional disclosure.

XMSE TOE architecture

Signing backend, verify path, and pilot CA boundary in one diagram. Full text in Appendix C PDF.

• Backend Generator Product — keys in pilot HSM path; c2patool signing for all declared MIME types.
• Same signing credential chain as c2pa.xenlook.com live demo and production XMSE output.
• CPL and Trust List listing not claimed; pilot Pre–Trust List disclosure applies.