security_review/wallet_custody_evidence_template.json

{
  "artifacts": [
    {
      "exists": true,
      "path": "docs/spacecash/WALLET_RECOVERY_CUSTODY_POLICY.md",
      "sha256": "40ED88D9B8CFDB202181F472D046075CF47EAD2296B3A968F68F3797733B66B0"
    },
    {
      "exists": true,
      "path": "docs/spacecash/MAINNET_GATE.md",
      "sha256": "C41DAD804A8461829733E15722B1939123E3E4F3D4BC18E2080D5E397C0DEAB0"
    },
    {
      "exists": true,
      "path": "docs/spacecash/THREAT_MODEL.md",
      "sha256": "AFD89190A4C0B763387E6358A242BBC047E2032568B64D6B792FD8715F77A46A"
    }
  ],
  "chain_id": "spacecash-devnet-1",
  "controls": {
    "address_versioning_path": "",
    "address_versioning_sha256": "",
    "backup_rotation_path": "",
    "backup_rotation_sha256": "",
    "backup_verification_flow_path": "",
    "backup_verification_flow_sha256": "",
    "compromised_key_procedure_path": "",
    "compromised_key_procedure_sha256": "",
    "hardware_or_custody_plan_path": "",
    "hardware_or_custody_plan_sha256": "",
    "lost_key_procedure_path": "",
    "lost_key_procedure_sha256": "",
    "private_key_handling_policy_path": "",
    "private_key_handling_policy_sha256": "",
    "recovery_standard_path": "",
    "recovery_standard_sha256": ""
  },
  "decisions": [
    {
      "evidence": "",
      "id": "recovery_standard",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Recovery Phrase Or Deterministic Recovery Standard"
    },
    {
      "evidence": "",
      "id": "address_versioning",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Address Versioning And Migration Boundary"
    },
    {
      "evidence": "",
      "id": "backup_rotation",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Encrypted Backup Rotation Policy"
    },
    {
      "evidence": "",
      "id": "lost_key_procedure",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Lost-Key Procedure And User Warning"
    },
    {
      "evidence": "",
      "id": "compromised_key_procedure",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Compromised-Key Procedure"
    },
    {
      "evidence": "",
      "id": "hardware_wallet_or_custody",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Hardware Wallet Or Custody Position"
    },
    {
      "evidence": "",
      "id": "user_backup_verification",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "User Backup Verification Flow"
    },
    {
      "evidence": "",
      "id": "private_key_handling",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Private-Key Handling And Logging Boundary"
    },
    {
      "evidence": "",
      "id": "development_key_exclusion",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Development Candidate Key Exclusion"
    },
    {
      "evidence": "",
      "id": "support_escalation",
      "notes": "",
      "reviewer": "",
      "status": "not_reviewed",
      "title": "Support Escalation And Irrecoverable-Loss Messaging"
    }
  ],
  "final_approval": {
    "approved": false,
    "approved_at": "",
    "approver": "",
    "backup_passphrase_warning_approved": false,
    "custodial_operations_allowed": false,
    "development_keys_excluded": false,
    "lost_key_warning_approved": false,
    "server_private_key_storage_allowed": false,
    "statement": ""
  },
  "manual_gate": {
    "id": "wallet_recovery_custody_policy_complete",
    "reason": "Recovery standard, address versioning, backup rotation, lost-key and compromised-key procedures, and custody posture require approval.",
    "status": "not_complete"
  },
  "mode": "spacecash-wallet-recovery-custody-evidence-v1",
  "release_bundle_sha256": "",
  "reviewed_source_hash": "",
  "reviewer": {
    "contact": "",
    "engagement_or_ticket": "",
    "name": "",
    "reviewed_at": "",
    "role": ""
  },
  "status": "not_started",
  "version": 1,
  "wallet_policy_hash": "239750DE7AC4374A298EED8124925E8193B8D16FA966E0D6FBB256B873F422C8"
}