运营透明度仪表板

面向审计员和技术访客：提供实时运营测试、信任分数以及与行业内其他 CA 的基准对等性分析。

Composite trust scores are not published — pre-audit internal figures that must not be read as external assurance.

Dual terminology axes (v4.0)

Axis A · issuance & ops

Subscriber certs · ops tests · CRL/OCSP · Trust List gates — metrics below

Axis B · media evidence

Watermark · forensic · fingerprint · C2PA · C1/C2 anchor — /xmse-learn · /security

G1 · C2PA Trust List
in-progress · Not listed (pilot) · review queue
G2 · Key management (HSM)
planned · CPS §11.3 file-based pilot live · HSM ceremony planned
G3 · WebTrust
planned · engagement pending
G4 · RFC3161 TSA
planned · No own TSA · external TSAs (DigiCert, Sectigo, SSL.com) anchored
G5 · External subscriber issuance
planned · Blocked (policy blocks external issuance) · pilot self-serve only

Subscriber issued · 0 · ops test issued 0 (may all be revoked)

Operational tests · 59/60Weighted 59/60 · 1 informational shortfall(s) · 1 operational test failure(s) · WebTrust / ETSI audit (w=10, 75%)

BENCHMARK-PARITY.md →

Generator signed paths · 22,764 paths (10,544 images + 12,220 videos · cumulative signed verify paths, not unique assets) · snapshot as of 2026-06-13 (not live)

API · /api/transparency

5-stage status vocabulary

1.Invisible markwired-unverified
2.Recipient trace markingwired-unverified
3.Fingerprintin-progress
4.C2PA signverified
5.Permissioned hash anchorwired-unverified

verified / wired-unverified / in-progress / planned — SSOT: c2pa-portal-surface-status-ssot.json