STANDARDS & SECURITY
What we can show you today.
A security page should only say what's true. This one lists what's live and checkable, what's under outside review, and what we haven't done yet.
LIVE AND CHECKABLE
On mainnet, in the open.
Encryption
Client side. Keys never leave the device; the network never holds readable bytes.
Recovery
N-of-M multi-party recovery. No copy of any key is held by SUM.
Selective disclosure
Per field: public, shared with named parties, or never transmitted. Private fields never reach the network. What it holds is a short fingerprint of each one, enough to prove the field existed and not enough to recover it.
Consensus
Validator quorum. No admin key and no single signer.
Code
Rust throughout, MIT and Apache 2.0 where open.
Chain
Public endpoint, public explorer, every enablement at a recorded block height.
No single operator
No admin key and no single signer on SUM Chain. Public explorer and public endpoint, so verification never depends on a contract with us.
UNDER REVIEW
Not claimed until it's checked.
Whitepaper
With outside cryptographers now. Results go up here in full, whether or not they flatter us.
Proof of contribution
Attestation and zero knowledge proofs are live for a fixed architecture. Reward economics and slashing are a proposal, labeled as one.
