// one discipline, two sides
// A gate that's locked but unusable has failed; so has one that's usable but open.
const REQUIRE = { PERCEIVABLE: 0b0001, OPERABLE: 0b0010, ROBUST: 0b0100, SECURE: 0b1000 };
const FULL = REQUIRE.PERCEIVABLE | REQUIRE.OPERABLE | REQUIRE.ROBUST | REQUIRE.SECURE; // 0b1111
function gate(profile) {
const missing = FULL & ~profile.conformance;
if (missing === 0) return { access: "granted" };
// Say *why*. Hiding the reason isn't security — it's an inaccessible error.
return { access: "denied", unmet: decode(missing) };
}
// the gate
// live
RES-06 shadow-dom-auditor alpha
Pierces shadow DOM for the accessibility defects and injection-sink smells conventional
scanners walk past — including cross-root
aria-labelledby that can't resolve
by design.
ERROR aria-idref-broken [shadow] — cross-root idrefs never resolve
→ view on github
OPS-10 kitchen-microsegmenter alpha
A device inventory becomes a zero-trust, default-deny nftables ruleset — a compromised
sensor can't pivot to the POS. Fails closed. Never auto-applies.
ERROR uptier-flow — iot->pos:443 could pivot into pos
→ view on github
// roadmap
Twenty-eight. Five first. Status is honest.
research 7
- RES-01 protocol-fuzzer planned
- RES-02 forensic-vault planned
- RES-03 hid-toolkit planned
- RES-04 pos-interceptor planned
- RES-05 evasion-sandbox planned
- RES-06 shadow-dom-auditor alpha
- RES-07 airgap-detector de-risk
assurance 7
- IA-01 credential-entropy planned
- IA-02 pdf-ua-linter alpha
- IA-03 wcag-ci-gate planned
- IA-04 vpat-generator alpha
- IA-05 procurement-scanner alpha
- IA-06 incident-disclosure-toolkit alpha
- IA-07 log-hardener alpha
operations 14
- OPS-01 recipe-costing planned
- OPS-02 haccp-automator planned
- OPS-03 traceability-ledger planned
- OPS-04 staff-training-bot planned
- OPS-05 kds-middleware planned
- OPS-06 npd-tracker planned
- OPS-07 menu-a11y-engine alpha
- OPS-08 allergen-validator alpha
- OPS-09 iot-firmware-auditor alpha
- OPS-10 kitchen-microseg alpha
- OPS-11 price-optimizer planned
- OPS-12 sous-vide-telemetry alpha
- OPS-13 food-waste-engine planned
- OPS-14 skim-identity de-risk
// doctrine
Ship few, ship real, label honestly. Authority is earned, never staged.