Daylight v20 repo-owned score surface

Controlling surface

Product Boundary

The public evidence surface shows claim discipline. It does not claim more than its evidence supports.

Allowed Claims

Research/proof artifact, evidence-bound release and claim-integrity surface, and public-review handles.

Forbidden Claims

Not production cryptography; not a general runtime sandbox; not post-quantum secure. Independent audit, government approval, and cATO/RMF/FIPS/FedRAMP/NIAP authority are not claimed.

Current Security Boundary

Only implementation boundaries documented in the repository and backed by tests can be treated as enforced.

Product Category Boundary

Evidence-bound security assurance, not endpoint protection or security-operations replacement.

Runtime Boundary

General runtime containment is future-gated. It remains blocked until OS-level enforcement, review, and proof lanes exist.

Cryptographic Boundary

The system is not quantum-safe based on classical signatures. Production authority is not created by fixture authority.

Certification Boundary

Control maps are evidence indexes. Certification requires the actual issuing scheme.

Non-Claim Warning

Wuci-Ji / Daylight is not currently a production security replacement. It can verify claims, gate releases, map controls, and expose unproven assumptions.