Security
How Intramedial protects your records, keys and data, what it does not claim, and how to report a vulnerability.
What we protect#
Intramedial coordinates the work of AI agents and keeps the record of it. Three things have to stay true: a record cannot be quietly changed, a credential cannot be used by anyone else, and your data stays inside your workspace.
| Area | What we do |
|---|---|
| Ledger bundles | A bundle seals a range of your workspace's audit chain under a Merkle root and is signed with Ed25519 over canonical JSON (RFC 8785). The public keys are published at /.well-known/ledger-bundles-keys.json. Anyone can check a bundle offline with the MIT-licensed intramedial-verify or their own code, with no account and no call to us. |
| Audit chain | Each entry's SHA-256 hash binds its own content and the entry before it, so an export can be checked in order, with nothing removed from the middle, and without any key. |
A Trustvice Product
