This repository contains the public, security-critical core of SealedCircle. It is intentionally separated from the private product repository so the normalization rules, comparison contract, consent state machine, protocol boundaries, artifact binding, replay defenses, Local Reveal mapping, and fixed vectors can be inspected and reproduced without publishing commercial UI, operations, billing, or customer-management code.
SealedCircle uses exactly three technical trust pillars:
- Open-source security core
- Cryptographic authenticity
- Public reproducibility
The code is pre-production. No production PSI protocol is frozen in this revision. The repository publishes the security boundary and its executable Gates; P36 will freeze a protocol only after the required capability and release checks pass.
comparison-domain: Comparison Contract, consent, state transitions, and receiptstabular-core: CSV parsing, normalization, deduplication, and Local Reveal mappingprotocol-core: protocol messages, artifact binding, replay protection, and Gatestrust-boundary: identity, invitation, abuse, and emergency authorization rulestest-fixtures: synthetic fixtures and plaintext correctness references
corepack enable
pnpm install --frozen-lockfile
pnpm verify
The boundary verifier rejects unexpected workspace roots and server or product imports. All test data is synthetic.
MIT. See LICENSE.