pragma.vision Technology observatory & strategic foresight

Verification register Security & Identity

Readiness verdict

Project Veraison

A dated reading of what is claimed, reported, and independently verified in the current evidence.

As of
2026-10-09
Revision
3
Method
v1.4.0

Current reading

Readiness band and full integer triple

AI-assisted assembly · derived results

Readiness band

Emerging

Primary summary from verified readiness

Confidence
89% · stale
Computed at
2026-10-09T21:10:17.25509+00:00
Claimed
35

Public ambition and stated capability

Reported
35

Observed practitioner reporting

Verified
25

Independently supported evidence

Gap
+10

Claimed leads verified

Evidence strength Growing

Decision

What the current evidence supports

Agent-assisted assessment · independently reviewed · 2026-10-09

Suitable for controlled attestation pilots with scheme-specific security testing.

Why
A complete verifier workflow has been demonstrated, but TPM replay protection requires explicit policy enforcement and current-build validation.
Next
Pin the implementation, configure freshness policies, and test valid, tampered and replayed evidence on the intended hardware.

Constraints

Blockers

  • TPM freshness enforcement requires an explicit appraisal policy.
  • Independent validation covers one emulated-TPM configuration.
  • Production security and operational behavior need validation for each selected attestation scheme.

Evidence summary

Derived counts

AI-assisted assembly

Total
12
Tier 1
10
Tier 2
2
Tier 3
0
Supports
5
Contradicts
3
Context
4
Latest observed
2026-09-02

Counts and dates only. Raw signals, private excerpts, trust records, and internal corpus material are not published here.

Publication record

Revisions

Revision 3

  1. 2026-07-19 Reading moved from ready to ready.
  2. 2026-09-22 Reading moved from ready to ready.
  3. 2026-09-30 Reading moved from ready to emerging.

Your opinion

Tell us anything.

What works, what doesn't, what's missing — especially about our watches, lenses, and the register itself. Anonymous is fine; leave an email if you'd like a reply.