CA readiness
Institutional readiness (honest)
Internal gap tracker — not a public Trust List score and not a self-graded competitive index. Internal gap tracker only — not public marketing scores. SSL.com leads on Trust List · WebTrust · HSM · TSA until we close each gate.
Trust List · false
Intake · pem_resubmit_sent_awaiting_approver_queue
Operational tests · 56/56 PASS (214)
SLA last run · 2026-08-09T14:00:11.555Z · pass 99.4%
Gates
G1 · C2PA Trust List listed
in_progress · XenLook: awaiting_approver_queue
G2 · GCP KMS HSM (asia-northeast3)
prep_complete · XenLook: file keys · dry_run registry
G3 · WebTrust for CAs audit
outreach_ready · XenLook: engagement_pending
G4 · RFC3161 TSA (Trust List)
deferred · XenLook: stub API only
G5 · External Generator subscriber issuance
policy_draft · XenLook: policy blocked until G1+G2
G6 · Production CPS + public repository
v1_1_draft · XenLook: CPS v1 draft · practices live
G7 · Operational transparency (real tests)
done · XenLook: 56/56 operational tests on 214