{"schemaVersion":"corex.public-status.v1","service":"corex-platform","release":{"gitCommitSha":"5ce003d3ea79320efdb744ada951451b3bf5d2ba","gitCommitRef":"main","deploymentId":"dpl_9D4R27ngA3bH1ceF7eTP7zeK31RG","vercelEnvironment":"production"},"overall":"OPERATIONAL","capabilities":{"active":154,"ready":31,"gated":1,"total":187},"trustRails":{"credentialPersistence":"ACTIVE","historicalIntegrity":"ACTIVE","independentLedger":"ACTIVE"},"identity":{"browserHuman":"ACTIVE","serviceOidc":"ACTIVE"},"interoperability":{"oid4vci":"READY_TO_ACTIVATE","oid4vp":"READY_TO_ACTIVATE","w3cVc20":"AVAILABLE_PROJECTION","sdJwtVc":"VERSION_PIN_REQUIRED","isoMdoc":"VERSION_PIN_REQUIRED","qualificationClaimed":false},"performance":{"schemaVersion":"corex.performance-evidence.v1","capability":"PERFORMANCE_AND_SCALE_EVIDENCE","state":"ARCHITECTURE_READY_BENCHMARK_RAIL_ACTIVE","currentRuntime":{"provider":"VERCEL","nodeVersion":"v22.23.2","architecture":"x64","deploymentEnvironment":"production","gitCommitSha":"5ce003d3ea79320efdb744ada951451b3bf5d2ba"},"evidencePolicy":{"levels":["ARCHITECTURE_READY","MEASURED","REPRODUCED","CERTIFIED_BENCHMARK"],"scaleProjectionsAreClaims":false,"modeledScaleClass":"MODELED_NOT_MEASURED","publishExactThroughputOnlyWhenApproved":true,"synchronousAndAsynchronousThroughputSeparated":true,"providerCeilingsSeparatedFromCorexSoftwareCapacity":true},"scalability":{"architecture":"HORIZONTALLY_SCALABLE_PROVIDER_NEUTRAL","dimensions":["application_nodes","cpu_and_memory_per_node","worker_concurrency","network_bandwidth","database_compute_and_iops","connection_pool_capacity","queue_and_event_delivery_capacity","signer_capacity","cache_and_read_projection_capacity","regional_distribution"],"effectiveCapacityRule":"MIN(compute,persistence,signer,network,queue,external-provider)","externalAnchoring":"ASYNC_SEPARATE_PROVIDER_BOUNDARY_WHERE_POLICY_ALLOWS"},"historicalClaim":{"claim":"60,000-5,000,000 transactions/credentials per second","state":"HISTORICAL_REVALIDATION","currentPublicApproval":false,"rule":"Do not publish as a current production throughput claim until workload-specific evidence is reproduced and approved."},"workloads":[{"id":"corex.primitive.canonical-hash","name":"Canonical credential hashing","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.primitive.ed25519-sign","name":"Ed25519 credential signing","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.primitive.ed25519-verify","name":"Ed25519 credential verification","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.durable.credential-issuance","name":"Durable credential issuance","lane":"DURABLE_TRUST","state":"ACTIVE_BENCHMARK_NAMESPACE_ONLY","sideEffects":"EPHEMERAL_POSTGRES"},{"id":"corex.durable.public-verification","name":"Persisted credential verification","lane":"DURABLE_TRUST","state":"ACTIVE_BENCHMARK_NAMESPACE_ONLY","sideEffects":"READ_ONLY_AFTER_SYNTHETIC_ISSUANCE"},{"id":"corex.runtime.http-read","name":"CoreX HTTP read path","lane":"RUNTIME","state":"ACTIVE","sideEffects":"GET_ONLY"},{"id":"corex.distributed.scale-out","name":"Distributed horizontal scale","lane":"DISTRIBUTED","state":"DEFINED_REQUIRES_CONTROLLED_MULTI_NODE_RUN","sideEffects":"CONTROLLED_BENCHMARK_ENVIRONMENT"},{"id":"corex.external.kms-sign","name":"External KMS signing","lane":"EXTERNAL_PROVIDER","state":"DEFINED_PROVIDER_BOUND","sideEffects":"EXTERNAL_PROVIDER_CALLS"},{"id":"corex.external.integrity-anchor","name":"External integrity anchoring","lane":"EXTERNAL_PROVIDER","state":"DEFINED_ASYNC_PROVIDER_BOUND","sideEffects":"TESTNET_OR_CONTROLLED_PROVIDER_ONLY"}],"publishedResults":[],"disclosure":"PUBLIC_SAFE_PERFORMANCE_GOVERNANCE_NO_SECRETS_NO_PROVIDER_CREDENTIALS"},"adaptiveCapacity":{"schemaVersion":"corex.adaptive-capacity.v1","capability":"ADAPTIVE_CAPACITY_AND_AUTOSCALE","state":"ACTIVE","architecture":"PROVIDER_NEUTRAL_HORIZONTAL_SCALE","runtime":{"provider":"VERCEL","autoscalingMode":"PROVIDER_MANAGED_FLUID","fluidComputeSourceConfig":"ENABLED_BY_VERCEL_JSON","strategy":"USE_EXISTING_CONCURRENCY_BEFORE_NEW_INSTANCES_THEN_SCALE_OUT","purchaseAutomation":false},"database":{"engine":"POSTGRESQL","poolPolicy":{"max":10,"min":0,"idleTimeoutMillis":10000,"connectionTimeoutMillis":5000,"maxUses":7500,"allowExitOnIdle":true},"scalingRule":"KEEP_PER_INSTANCE_POOL_BOUNDED_AND_SCALE_DATABASE_CAPACITY_SEPARATELY_FROM_APPLICATION_NODES"},"refinementLoop":["OBSERVE","CLASSIFY_BINDING_CONSTRAINT","ALLOW_RUNTIME_AUTOSCALE","ADJUST_BOUNDED_WORKER_OR_POOL_POLICY_WHEN_EVIDENCED","INCREASE_PROVIDER_CAPACITY_ONLY_WHEN_BINDING","REMEASURE","FREEZE_NEW_EVIDENCE"],"scalableDimensions":["application_instances","in_function_concurrency","cpu_and_memory","database_compute_iops_connections","worker_concurrency","queue_partitions","network_bandwidth","signer_capacity","read_projection_capacity","regional_distribution"],"safety":{"noAutomaticSpend":true,"noTenantAuthorityChanges":true,"noSecurityBypass":true,"noProductionSyntheticWrites":true,"providerQuotaNotArchitectureCeiling":true,"modeledCapacityNotMeasuredClaim":true},"thresholds":{"highCpu":0.75,"highMemory":0.8,"highDbPool":0.8,"highSigner":0.8,"highNetwork":0.8,"maxErrorRate":0.01,"maxRateLimitRate":0.005,"queueDepthHigh":500,"queueAgeHighSeconds":60,"lowUtilization":0.2},"disclosure":"PUBLIC_SAFE_CAPACITY_POLICY_NO_SECRETS_NO_PROVIDER_CREDENTIALS"},"scalability":{"schemaVersion":"corex.scalability-capabilities.v1","state":"ACTIVE","counts":{"ACTIVE_FUNCTIONAL":8,"ACTIVE_OPTIMIZED":6,"ADAPTER_READY_PROVIDER_NOT_BOUND":1,"LATENT_NOT_ACTIVATED":2,"EVIDENCE_PENDING":1},"principles":{"providerSubscriptionIsArchitectureCeiling":false,"canonicalWriteAuthoritySeparatedFromReadScale":true,"modeledScaleIsMeasuredClaim":false,"performanceClaimsRemainWorkloadSpecific":true},"capabilities":[{"id":"fluid-horizontal-runtime","title":"Elastic runtime concurrency and scale-out","state":"ACTIVE_FUNCTIONAL","layer":"RUNTIME","valueProposition":"Uses warm in-function concurrency first and allows provider-managed horizontal scale without changing CoreX authority or tenant semantics.","evidence":["vercel.json#fluid=true","src/core/adaptiveCapacity.ts"],"currentUse":"Production runtime elasticity.","optimizationPath":"Increase provider compute class only after measured CPU/memory pressure remains binding.","publicSafe":true},{"id":"bounded-postgresql-pooling","title":"Bounded PostgreSQL connection pooling","state":"ACTIVE_OPTIMIZED","layer":"PERSISTENCE","valueProposition":"Prevents application-instance growth from multiplying database connections without control.","evidence":["src/core/prisma.ts","src/core/adaptiveCapacity.ts"],"currentUse":"All Prisma/PostgreSQL access.","optimizationPath":"Tune pool/database compute/IOPS together from measured pool pressure.","publicSafe":true},{"id":"leased-horizontal-event-workers","title":"Leased horizontally scalable delivery workers","state":"ACTIVE_OPTIMIZED","layer":"QUEUE","valueProposition":"PROCESSING leases allow multiple workers to drain durable delivery backlogs without concurrent duplicate selection.","evidence":["src/core/eventDelivery.ts","scripts/benchmark-corex-queue-pressure.mjs"],"currentUse":"Durable event delivery, retry and replay with automatic bounded scheduled backlog draining.","optimizationPath":"Increase workers only when queue depth/age is binding.","publicSafe":true},{"id":"scheduled-event-backlog-drain","title":"Automatic bounded event backlog draining","state":"ACTIVE_OPTIMIZED","layer":"QUEUE","valueProposition":"A portable scheduled reconciler drains multiple leased delivery batches per invocation, exits quickly when idle, and allows overlapping schedulers without duplicate ownership.","evidence":["src/routes/eventDeliveryReconciliation.ts","src/core/scheduledJobs.ts","vercel.json"],"currentUse":"Production scheduler binding at one-minute cadence with bounded batch/time policy.","optimizationPath":"Tune batch count/time budget from observed queue depth and provider limits rather than keeping always-on workers.","publicSafe":true},{"id":"dead-letter-replay","title":"Dead-letter and replay recovery","state":"ACTIVE_FUNCTIONAL","layer":"QUEUE","valueProposition":"Absorbs downstream outages without forcing synchronous request paths to fail permanently.","evidence":["src/core/eventDelivery.ts","src/routes/eventDelivery.ts"],"currentUse":"Durable integration delivery recovery.","publicSafe":true},{"id":"credential-derived-projections","title":"Canonical credential plus derived projections","state":"ACTIVE_FUNCTIONAL","layer":"READ_PATH","valueProposition":"Separates canonical authority from document/card/W3C/proof representations so read/verification surfaces can scale independently.","evidence":["src/core/credentialProjectionRegistry.ts","src/core/credentialProjection.ts"],"currentUse":"Credential documents, cards, VC and independent-proof representations.","optimizationPath":"Introduce dedicated read replicas/materialized projections only when verification traffic becomes persistence-bound.","publicSafe":true},{"id":"hot-proof-verification-cache","title":"Hot cryptographic proof verification cache","state":"ACTIVE_OPTIMIZED","layer":"CRYPTO","valueProposition":"Reuses verification results for immutable credential payload/proof pairs inside warm instances while always re-reading live lifecycle state.","evidence":["src/core/credentialProofCache.ts","src/core/credentialLifecycle.ts"],"currentUse":"Repeated verification of hot credentials.","optimizationPath":"Keep lifecycle uncached; use distributed/materialized read projection only after measured demand.","publicSafe":true},{"id":"single-read-certificate-projection","title":"Single-read certificate projection","state":"ACTIVE_OPTIMIZED","layer":"READ_PATH","valueProposition":"Avoids a duplicate credential database lookup when rendering human-readable certificate/QR projections.","evidence":["src/core/credentialProjection.ts","src/core/credentialLifecycle.ts"],"currentUse":"Certificate and QR projection paths.","publicSafe":true},{"id":"public-verification-rate-limit-provider-boundary","title":"Public verification rate-limit provider boundary","state":"ADAPTER_READY_PROVIDER_NOT_BOUND","layer":"READ_PATH","valueProposition":"Preserves a low-latency local guard today while allowing a future distributed limiter to provide globally consistent abuse control across autoscaled instances.","evidence":["src/core/publicVerificationGuard.ts"],"currentUse":"Local per-instance verification abuse guard with distributed-provider adapter contract.","optimizationPath":"Bind a distributed edge/Redis/WAF-backed provider when traffic or abuse patterns justify global coordination.","publicSafe":true},{"id":"workload-identity-portability","title":"Keyless workload identity portability","state":"ACTIVE_FUNCTIONAL","layer":"IDENTITY","valueProposition":"Supports Vercel OIDC plus generic/AWS/Azure/GCP/Kubernetes/GitHub workload identity without making secrets or one runtime provider architectural dependencies.","evidence":["src/core/workloadIdentity.ts","scripts/verify-runtime-portability.mjs"],"currentUse":"Service-to-service and signer transport composition.","publicSafe":true},{"id":"oci-portability","title":"OCI/container runtime portability","state":"ACTIVE_FUNCTIONAL","layer":"PORTABILITY","valueProposition":"Node 22 standard entrypoint allows CoreX to move from serverless to containers/Kubernetes/private cloud when workload economics or sovereignty require it.","evidence":["Dockerfile","scripts/verify-oci-portability.mjs"],"currentUse":"Portability and future dedicated-node deployment.","publicSafe":true},{"id":"signer-abstraction","title":"Independent signer capacity boundary","state":"ACTIVE_FUNCTIONAL","layer":"CRYPTO","valueProposition":"Separates CoreX software throughput from KMS/provider signer quotas so signing capacity can scale independently.","evidence":["src/core/productionSigner.ts","src/core/awsKmsCredentialSigner.ts"],"currentUse":"Production credential signing.","optimizationPath":"Benchmark local and KMS signing separately; increase signer quota only when it becomes binding.","publicSafe":true},{"id":"integrity-anchor-abstraction","title":"Asynchronous integrity-anchor provider boundary","state":"ACTIVE_FUNCTIONAL","layer":"INTEGRATION","valueProposition":"Keeps ledger/transparency confirmation outside the CoreX synchronous authority path where policy allows.","evidence":["src/core/integrityAnchor.ts","src/core/ledgerAnchor.ts"],"currentUse":"Independent integrity evidence.","optimizationPath":"Trust Epoch batching is active when the checkpoint provider is bound; tune epoch size/age from measured anchor cost and confirmation throughput.","publicSafe":true},{"id":"usage-and-quota-observation","title":"Usage metering and entitlement quota primitives","state":"ACTIVE_FUNCTIONAL","layer":"EVIDENCE","valueProposition":"Provides idempotent tenant/workspace usage observations and quota enforcement foundations for commercial control and capacity economics.","evidence":["src/core/usageMetering.ts","src/core/quotaEnforcement.ts"],"currentUse":"Commercial metrics and entitlement/quota control.","publicSafe":true},{"id":"distributed-verification-read-plane","title":"Distributed read/verification plane","state":"LATENT_NOT_ACTIVATED","layer":"READ_PATH","valueProposition":"The projection architecture can support read replicas, regional verification nodes and safe projection caches without moving canonical write authority.","evidence":["src/core/credentialProjectionRegistry.ts","docs/performance/COREX_ADAPTIVE_CAPACITY_AUTOSCALE_BASELINE_2026-09-23.md"],"currentUse":"Architecture-ready; dedicated replica topology not currently bound.","optimizationPath":"Activate only after read traffic is measured as persistence-bound.","publicSafe":true},{"id":"multi-core-crypto-workers","title":"Multi-core cryptographic worker execution","state":"LATENT_NOT_ACTIVATED","layer":"CRYPTO","valueProposition":"CPU-bound hashing/sign/verify workloads can use dedicated worker processes/threads on multi-vCPU nodes or container clusters.","evidence":["scripts/benchmark-corex-primitive-scale.mjs"],"currentUse":"Benchmark-only multi-process evidence.","optimizationPath":"Activate on dedicated multi-vCPU/container runtime if CPU-bound cryptographic work becomes material.","publicSafe":true},{"id":"batch-merkle-anchor","title":"Batch/Merkle Trust Epoch anchoring","state":"ACTIVE_OPTIMIZED","layer":"INTEGRATION","valueProposition":"Amortizes external integrity checkpoints across many historical-integrity records while preserving per-record Merkle inclusion proofs.","evidence":["src/core/trustEpoch.ts","src/core/trustEpochReconciliation.ts","src/core/polygonPosTrustEpochCheckpoint.ts"],"currentUse":"Trust Epoch sealing and external checkpoint reconciliation through COREX_POLYGON_POS_TRUST_EPOCH_V1 on polygon-pos.","optimizationPath":"Tune minimum leaves, maximum leaves and maximum age from measured anchor cost, latency and provider rate limits.","publicSafe":true},{"id":"independent-multihost-certification","title":"Independent multi-host distributed certification","state":"EVIDENCE_PENDING","layer":"EVIDENCE","valueProposition":"Separates shared-host composition tests from true cross-node scale-efficiency claims.","evidence":["docs/performance/COREX_AUTOMATED_CAPACITY_TRANCHE_BASELINE_2026-09-23.md"],"currentUse":"Current 1/2/4/8 logical runtime scale tests share one benchmark host.","optimizationPath":"Run on independent hosts/provider-grade distributed infrastructure when a public distributed throughput claim is required.","publicSafe":true}]},"products":{"schemaVersion":"corex.product-fabric.v1","generatedAt":"2026-10-16T08:46:52.558Z","products":[{"id":"verify","name":"CoreX Verify","family":"TRUST","state":"ACTIVE","description":"Current-state and historical verification over governed evidence.","modules":["VERIFY","INTEGRITY","AUDIT"],"capabilityIds":["corex.verify.public-reference","corex.verify.vector-proof-sync","corex.trust-anchor.transparency-merkle"],"integrationIds":[],"channels":["WEB","REST_API","QR_SCAN"],"authority":{"corexRole":"VERIFY_AND_EXPLAIN_TRUST_STATE","externalAuthorities":["BOUND_SOURCE_SYSTEMS"]},"capabilityStates":[{"id":"corex.verify.public-reference","state":"ACTIVE"},{"id":"corex.verify.vector-proof-sync","state":"ACTIVE"},{"id":"corex.trust-anchor.transparency-merkle","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"credentials","name":"CoreX Credentials","family":"TRUST","state":"MANAGED","description":"Lifecycle-managed signed credentials and portable projections.","modules":["CREDENTIALS","IDENTITY","VERIFY"],"capabilityIds":["corex.credential.signed","corex.credential.lifecycle-status","corex.interop.w3c-vc"],"integrationIds":[],"channels":["WEB","REST_API","QR_SCAN","WALLET"],"authority":{"corexRole":"CANONICAL_CREDENTIAL_LIFECYCLE","externalAuthorities":["ISSUER_AUTHORITY_WHERE_APPLICABLE"]},"capabilityStates":[{"id":"corex.credential.signed","state":"ACTIVE"},{"id":"corex.credential.lifecycle-status","state":"ACTIVE"},{"id":"corex.interop.w3c-vc","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"registry","name":"CoreX Registry","family":"TRUST","state":"MANAGED","description":"Living assets, rights, lineage and governed history.","modules":["REGISTRY","VERIFY","INTEGRITY"],"capabilityIds":["corex.vertical.property","corex.trust-anchor.transparency-merkle"],"integrationIds":[],"channels":["WEB","REST_API"],"authority":{"corexRole":"TRUST_STATE_AND_EVIDENCE","externalAuthorities":["STATUTORY_OR_SOURCE_REGISTRIES"],"legalAuthority":false},"capabilityStates":[{"id":"corex.vertical.property","state":"READY"},{"id":"corex.trust-anchor.transparency-merkle","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"ai","name":"CoreX AI","family":"INTELLIGENCE","state":"FOUNDATION","description":"Provider-neutral governed intelligence, AI assurance and bounded tool orchestration over trusted CoreX context.","modules":["AI","CONTROL_PLANE","STUDIO","WATCH","DEFENDER"],"capabilityIds":["corex.ai.governed-runtime","corex.control-plane.runtime","corex.operations.nervous-system"],"integrationIds":["ai-model-provider"],"channels":["WEB","REST_API","SDK","STUDIO"],"authority":{"corexRole":"ADVISORY_INTELLIGENCE_AND_GOVERNED_ORCHESTRATION","externalAuthorities":["APPROVED_MODEL_PROVIDERS"],"legalAuthority":false},"capabilityStates":[{"id":"corex.ai.governed-runtime","state":"READY"},{"id":"corex.control-plane.runtime","state":"ACTIVE"},{"id":"corex.operations.nervous-system","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"finance","name":"CoreX Finance","family":"FINANCE","state":"FOUNDATION","description":"Financial trust, transaction assurance, reconciliation, Watch and Defender over external financial facts.","modules":["FINANCE","VERIFY","WATCH","DEFENDER","INTEGRITY","AUDIT","CONNECT"],"capabilityIds":["corex.finance.transaction-trust","corex.finance.reconciliation","corex.finance.watch","corex.finance.defender","corex.trust-anchor.transparency-merkle"],"integrationIds":["payment-provider","shopify-commerce"],"channels":["WEB","REST_API","WEBHOOK"],"authority":{"corexRole":"TRUST_RECONCILIATION_EVIDENCE","externalAuthorities":["PAYMENT_PROCESSOR","BANK_OR_ACCOUNT_PROVIDER","COMMERCE_SOURCE"],"moneyCustody":false,"legalAuthority":false},"capabilityStates":[{"id":"corex.finance.transaction-trust","state":"ACTIVE"},{"id":"corex.finance.reconciliation","state":"ACTIVE"},{"id":"corex.finance.watch","state":"ACTIVE"},{"id":"corex.finance.defender","state":"ACTIVE"},{"id":"corex.trust-anchor.transparency-merkle","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"pay","name":"CoreX Pay","family":"FINANCE","state":"EXTERNAL_GATE","description":"Provider-integrated payment trust and lifecycle orchestration without CoreX becoming payment processor or custodian.","modules":["FINANCE","VECTOR","CONNECT","WATCH","DEFENDER"],"capabilityIds":["corex.pay.provider-orchestration","corex.finance.transaction-trust","corex.finance.reconciliation"],"integrationIds":["payment-provider","shopify-commerce"],"channels":["WEB","REST_API","WEBHOOK"],"authority":{"corexRole":"PAYMENT_TRUST_ORCHESTRATION","externalAuthorities":["PAYMENT_PROCESSOR","COMMERCE_SOURCE"],"moneyCustody":false,"legalAuthority":false},"capabilityStates":[{"id":"corex.pay.provider-orchestration","state":"READY"},{"id":"corex.finance.transaction-trust","state":"ACTIVE"},{"id":"corex.finance.reconciliation","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"platform","name":"CoreX Platform","family":"PLATFORM","state":"ACTIVE","description":"APIs, SDKs, Studio, Control Plane, metering, governance and provider-neutral trust infrastructure.","modules":["PLATFORM","CONTROL_PLANE","STUDIO","METERING","OPERATIONS","TENANCY"],"capabilityIds":["corex.product-fabric.declarative","corex.control-plane.runtime","corex.operations.event-delivery","corex.metering.usage","corex.metering.quota-enforcement","corex.tenancy.white-label"],"integrationIds":["corex-vector-signed-bridge","identity-provider"],"channels":["WEB","REST_API","SDK","WEBHOOK","STUDIO"],"authority":{"corexRole":"TRUST_PLATFORM_AND_GOVERNED_RUNTIME","externalAuthorities":["BOUND_SOURCE_SYSTEMS","BOUND_IDENTITY_PROVIDERS"]},"capabilityStates":[{"id":"corex.product-fabric.declarative","state":"ACTIVE"},{"id":"corex.control-plane.runtime","state":"ACTIVE"},{"id":"corex.operations.event-delivery","state":"ACTIVE"},{"id":"corex.metering.usage","state":"ACTIVE"},{"id":"corex.metering.quota-enforcement","state":"ACTIVE"},{"id":"corex.tenancy.white-label","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"connect","name":"CoreX Connect","family":"INTEGRATION","state":"FOUNDATION","description":"Provider-neutral connectivity catalogue and governed adapter framework.","modules":["CONNECT","PLATFORM"],"capabilityIds":["corex.connect.adapter-fabric"],"integrationIds":["corex-vector-signed-bridge","shopify-commerce","payment-provider","logistics-provider","identity-provider"],"channels":["REST_API","WEBHOOK","SDK","GATEWAY"],"authority":{"corexRole":"GOVERNED_CONNECTIVITY","externalAuthorities":["CONNECTED_SOURCE_SYSTEMS"]},"capabilityStates":[{"id":"corex.connect.adapter-fabric","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"pass","name":"CoreX Pass","family":"HOLDER","state":"FOUNDATION","description":"Holder-facing identity, credential and verification channel with wallet protocol readiness.","modules":["WALLET_PASS","IDENTITY","CREDENTIALS","VERIFY"],"capabilityIds":["corex.pass.holder","corex.interop.openid4vci-vp","corex.interop.w3c-vc"],"integrationIds":["identity-provider"],"channels":["WEB_MOBILE","WALLET","QR_SCAN"],"authority":{"corexRole":"HOLDER_PRESENTATION_AND_CONSENT","externalAuthorities":["IDENTITY_AND_CREDENTIAL_ISSUERS"]},"capabilityStates":[{"id":"corex.pass.holder","state":"READY"},{"id":"corex.interop.openid4vci-vp","state":"READY"},{"id":"corex.interop.w3c-vc","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}}],"generatedArtifacts":{"publicCatalogue":true,"controlPlaneProjection":true,"studioProjection":true,"capabilityAudit":true,"connectCatalogue":true,"financeCatalogue":true,"walletReadiness":{"schemaVersion":"corex.wallet-protocol-activation-readiness.v1","oid4vci":{"state":"READY_TO_ACTIVATE","requested":false,"profile":{"decision":"HOLD","status":"EUDI_TRUST_PROFILE_REQUIRED","profile":{"protocol":"OpenID4VCI","version":"1.0","status":"SUPPORTED_PROFILE_CONTRACT","role":"ISSUER_ADAPTER"},"trustProfileRequired":true,"qualificationClaimed":false},"transportImplemented":true,"issuerBaseUrlConfigured":false,"tokenSecretConfigured":false,"tokenEndpointReady":false,"credentialEndpointReady":false,"standardizedEndpointExposureAllowed":false},"oid4vp":{"state":"READY_TO_ACTIVATE","requested":false,"profile":{"decision":"HOLD","status":"EUDI_TRUST_PROFILE_REQUIRED","profile":{"protocol":"OpenID4VP","version":"1.0","status":"SUPPORTED_PROFILE_CONTRACT","role":"VERIFIER_ADAPTER"},"trustProfileRequired":true,"qualificationClaimed":false},"requestTransportImplemented":true,"responseValidatorImplemented":true,"verifierBaseUrlConfigured":false,"requestEndpointReady":false,"responseValidationReady":false,"standardizedEndpointExposureAllowed":false},"formats":{"w3cVc20":"AVAILABLE_PROJECTION","sdJwtVc":"VERSION_PIN_REQUIRED","isoMdoc":"VERSION_PIN_REQUIRED"},"qualificationClaimed":false,"safetyRule":"Standardized issuer/verifier endpoints must remain unadvertised until token/proof/credential or request/response validation semantics are complete."}},"authority":{"productDefinitions":"COREX_PLATFORM","pricing":false,"billing":false,"paymentProcessing":false,"legalAuthority":false,"externalSourceAuthorityPreserved":true}},"integrations":[{"id":"corex-vector-signed-bridge","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"CoreX ↔ VECTOR signed bridge","domain":"COREX","state":"GATED","authority":"COREX_PLATFORM_AND_COREX_VECTOR","note":"Signed bridge requires production URL and shared secret configuration.","secretValuesExposed":false},{"id":"credential-signer","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Credential signer / KMS","domain":"COREX","state":"ACTIVE","authority":"COREX_PLATFORM","note":"Signer readiness is derived from the credential capability registry.","secretValuesExposed":false},{"id":"polygon-ledger","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Polygon evidence rail","domain":"LEDGER","state":"ACTIVE","authority":"EVIDENCE_ONLY","note":"Ledger integrity evidence never overrides current source authority.","secretValuesExposed":false},{"id":"evidence-vault","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Private Evidence Vault","domain":"EVIDENCE","state":"ACTIVE","authority":"COREX_EVIDENCE_POLICY","note":"Availability is derived from the provider-neutral Evidence Vault readiness gate.","secretValuesExposed":false},{"id":"identity-provider","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Browser identity provider","domain":"IDENTITY","state":"ACTIVE","authority":"EXTERNAL_IDENTITY_SOURCE_PLUS_COREX_POLICY","note":"Provider adapters remain separate from canonical Actor identity.","secretValuesExposed":false},{"id":"shopify-commerce","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Shopify commerce","domain":"COMMERCE","state":"ACTIVE","authority":"SHOPIFY","note":"Shopify commerce lifecycle integration is production active and remains authoritative for current order/payment/fulfilment truth. Provider-specific payment and logistics activation are reported separately.","secretValuesExposed":false},{"id":"logistics-provider","engineeringState":"IMPLEMENTED","activationState":"EXTERNAL_CONFIRMATION_REQUIRED","name":"Carrier / locker / 3PL","domain":"LOGISTICS","state":"EXTERNAL_CONFIRMATION_REQUIRED","authority":"SHOPIFY_PLUS_SELECTED_LOGISTICS_PROVIDER","note":"Provider-neutral fulfilment, tracking, return and lifecycle rails are implemented; the selected carrier/locker/3PL remains an external activation gate.","secretValuesExposed":false},{"id":"accounting-erp","engineeringState":"READY","activationState":"READY","name":"Accounting / ERP adapter","domain":"PAYMENT","state":"READY","authority":"BOUND_ACCOUNTING_OR_ERP_SYSTEM","note":"Provider-neutral invoice, purchase-order and reconciliation contract is available; customer-specific API binding remains deployment-specific.","secretValuesExposed":false},{"id":"open-finance","engineeringState":"IMPLEMENTED","activationState":"EXTERNAL_CONFIRMATION_REQUIRED","name":"Open-finance / banking provider","domain":"PAYMENT","state":"EXTERNAL_CONFIRMATION_REQUIRED","authority":"REGULATED_BANK_OR_OPEN_FINANCE_PROVIDER","note":"Finance trust and reconciliation can consume consent-bound banking evidence, but regulated provider access and interoperability remain external gates.","secretValuesExposed":false},{"id":"registry-source","engineeringState":"READY","activationState":"READY","name":"External registry source adapter","domain":"COREX","state":"READY","authority":"BOUND_STATUTORY_OR_SOURCE_REGISTRY","note":"Registry-source adapter class preserves external legal/source authority while projecting governed trust evidence into CoreX.","secretValuesExposed":false},{"id":"payment-provider","engineeringState":"IMPLEMENTED","activationState":"EXTERNAL_CONFIRMATION_REQUIRED","name":"Payment processor (for example Paytrail)","domain":"PAYMENT","state":"EXTERNAL_CONFIRMATION_REQUIRED","authority":"PAYMENT_PROCESSOR_FOR_PROCESSING_SHOPIFY_FOR_ORDER_STATE","note":"Payment provenance and lifecycle ingestion are implemented provider-neutrally; Paytrail or another processor remains an external activation gate. Processor provenance is evidence only and Shopify remains commerce lifecycle authority.","secretValuesExposed":false}],"trustEpoch":{"schemaVersion":"corex.public-trust-epoch-status.v1","state":"ACTIVE","checkpoint":{"schemaVersion":"corex.trust-epoch-checkpoint-readiness.v1","state":"ACTIVE","providerId":"COREX_POLYGON_POS_TRUST_EPOCH_V1","network":"polygon-pos","externalCheckpointing":true,"registeredAdapters":[{"providerId":"COREX_POLYGON_POS_TRUST_EPOCH_V1","network":"polygon-pos","active":true}],"authorityRole":"INTEGRITY_EVIDENCE_NOT_SOURCE_AUTHORITY"},"epochCounts":{"CHECKPOINT_CONFIRMED":23},"latestEpoch":{"epochId":"corex-trust-epoch-000000000023","sequence":23,"state":"CHECKPOINT_CONFIRMED","treeSize":1,"merkleRoot":"cc897878850dd5a95f4ba3b0ec1dda095b8261ff0be8160ec83bd69057d1b93b","firstRecordedAt":"2026-10-06T18:56:56.197Z","lastRecordedAt":"2026-10-06T18:56:56.197Z","sealedAt":"2026-10-06T19:12:33.697Z","checkpoint":{"providerId":"COREX_POLYGON_POS_TRUST_EPOCH_V1","network":"polygon-pos","chainId":137,"transactionRef":"0x9011c141ebede6173f0e8904f34a07f026f258dc6b3f94e16d7241db607e4886","blockRef":"95072536","explorerUrl":"https://polygonscan.com/tx/0x9011c141ebede6173f0e8904f34a07f026f258dc6b3f94e16d7241db607e4886","confirmedAt":"2026-10-06T19:12:39.000Z"}},"disclosure":"AGGREGATE_EPOCH_STATE_ONLY_NO_RAW_EVENTS_NO_TENANT_IDENTIFIERS_NO_PII"},"observability":{"schemaVersion":"corex.observability.v1","traceContext":"corex.w3c-trace-context.v1","propagation":"W3C_TRACE_CONTEXT","correlationHeader":"X-CoreX-Correlation-ID","structuredTelemetry":true,"providerNeutral":true,"payloadLogging":false,"authority":{"telemetryIsObservationOnly":true,"authorizationAuthority":false,"sourceAuthority":false,"trustAuthority":false}},"serviceObjectives":{"schemaVersion":"corex.service-objectives.public-status.v1","state":"DRAFT_NOT_APPROVED","approved":false,"objectiveCount":5,"configuredTargetCount":0,"timeSeriesBackendBound":false,"targetValuesDisclosed":false,"contractualSla":false,"publicAvailabilityCommitment":false,"historicalPerformanceClaim":false,"disclosure":"PUBLIC_SAFE_OBJECTIVE_STATE_NO_TARGET_VALUES_NO_PRIVATE_MEASUREMENTS"},"operationalMeasurement":{"schemaVersion":"corex.operational-measurement-source.public-status.v1","state":"UNBOUND","bound":false,"approved":false,"providerType":null,"providerIdDisclosed":false,"approvalRefDisclosed":false,"contractualAuthority":false,"disclosure":"PUBLIC_SAFE_MEASUREMENT_BINDING_STATE_NO_PROVIDER_IDENTIFIER_NO_MEASUREMENT_VALUES"},"deploymentTopology":{"schemaVersion":"corex.deployment-topology.public-status.v1","state":"TOPOLOGY_EVIDENCE_INCOMPLETE","approved":false,"runtimeRegionObserved":true,"primaryDataRegionDeclared":false,"topologyMode":"UNDECLARED","permittedRegionCount":0,"dataRegionAllowed":false,"runtimeRegionDisclosed":false,"dataRegionDisclosed":false,"providerIdentityDisclosed":false,"approvalRefDisclosed":false,"dataResidencyGuarantee":false,"sovereignCloudClaim":false,"disasterRecoveryClaim":false,"disclosure":"PUBLIC_SAFE_TOPOLOGY_STATE_NO_REGION_IDS_NO_PROVIDER_IDS_NO_PRIVATE_APPROVAL_REFERENCES"},"disclosure":"PUBLIC_OPERATIONAL_STATE_ONLY_NO_SECRETS_NO_PRIVATE_IDENTIFIERS","checkedAt":"2026-10-16T08:46:53.219Z"}