git:whiteknightonhorse/provek

Issued 2026-08-20 08:30:14 UTC | valid until 2026-09-19 (30 days) | protocol 1.0.0 | profile 1.0.0 | evidence window 30 days

weak identity binding·verified·1 of 3 operations measured. The rest are stated as unmeasured, with the reason, rather than scored as zero.

Affiliated verification. The subject and the verifier’s owner are the same party. This record is a rehearsal of the protocol, not an independent verification, and it is marked so rather than left to be assumed.

Autonomy projection

80/ 100

Measures autonomy. Not reliability, not decision quality, not profitability, and not the presence of an accountable party.

Per operation

A level is assigned to an operation, never to a company. A single number for a whole company is a marketing number.

L4
Development initiationinferred
Who starts and lands changes to the running system, and whether that requires a human.
- O1 evidence of mixed forgery cost, so this level is inferred rather than measured
not measured
Deploymentnot measured: the check did not run
Who ships a change to production, and whether a human approves each one.
not measured
Treasury controlnot measured: the check did not run
Who can move funds, change destinations, or alter spending rules.

2 of 3 operations are not measured. Runtime evidence is not collected at this stage, and the passport says so rather than scoring them zero.

Accountability

Deliberately outside the score. The ladder measures how little a human is required; it says nothing about who answers when something goes wrong, so an empty control map can yield maximum autonomy and no addressee at once — both truths side by side. Nothing here has been inspected yet. That is why every row reads not measured rather than none: a field nobody looked at is not a business without an answer.

Emergency stop: not measured: the check did not run
Claims addressee: not measured: the check did not run
Insurance: not measured: the check did not run
Dispute path: not measured: the check did not run

What was actually observed

The quantities the level above was computed from. They are published so the verdict can be recomputed rather than believed — and so a reader who disagrees with the reasoning can say where.

Share of commits with a verified signature: 0
Distinct commit authors: 1
Share of commits from bot or app accounts: 0
Automated CI runs observed: 10
Commit the reading was taken at: 16524d75219da30763ccda80832424367fc86ff5

Identity binding

Binding: git:whiteknightonhorse/provek
Strength: weak
Properties: revocable
Why it matters: A domain expires and can be resold; a signing key rotates. Equating either with ownership of a token would overstate what the binding guarantees.

Human control map — coverage

This map can prove that a control path exists. It can never prove that no undiscovered path exists — that is impossible in principle, so the map publishes what it inspected and what it could not reach.

Inspected: github
Out of reach: server — runtime not presented by the subject
treasury — outside MVP scope
database — no access through the chosen channel
An undiscovered path would look like: privileged access through a CI secret or account recovery
Level ceiling implied by the map: L5

Self-reported — claimed by the subject, not verified by us

source: github
private: false