marchon/peergos-making-yourself-audit-ready-with-verae-datacubes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Sphinx HTML and 17-page LaTeX PDF for the audit-ready pack
Some checks are pending
ci / markdown (push) Waiting to run
Details

Browse source 
source/ is the Sphinx tree. Companion PDF hrefs are relative, not Markdown.
This commit is contained in:
George Lambert 2026-09-15 23:59:54 -04:00
parent afa270a141
commit da60402e88
104 changed files with 16818 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

25
build/latex/peergos-making-yourself-audit-ready-with-verae-datacubes.toc Normal file
View file

@ -0,0 +1,25 @@
\babel@toc {english}{}\relax
\contentsline {chapter}{\numberline {1}Peergos verification (what was actually audited)}{3}{chapter.1}%
\contentsline {section}{\numberline {1.1}Claim to check}{3}{section.1.1}%
\contentsline {section}{\numberline {1.2}Independent security audits (Europe)}{3}{section.1.2}%
\contentsline {section}{\numberline {1.3}EU funding / NLnet}{3}{section.1.3}%
\contentsline {section}{\numberline {1.4}Hosted instance location}{3}{section.1.4}%
\contentsline {section}{\numberline {1.5}Encrypted filesystem + hashed IPFS (design)}{4}{section.1.5}%
\contentsline {section}{\numberline {1.6}Not verified / do not claim}{4}{section.1.6}%
\contentsline {chapter}{\numberline {2}Architecture (audit interview)}{5}{chapter.2}%
\contentsline {chapter}{\numberline {3}BAAs and DPAs when ciphertext has no host keys}{7}{chapter.3}%
\contentsline {section}{\numberline {3.1}The operator statement}{7}{section.3.1}%
\contentsline {section}{\numberline {3.2}HIPAA (US) — Business Associate}{7}{section.3.2}%
\contentsline {section}{\numberline {3.3}GDPR (EU/UK) — processor vs technical measure}{8}{section.3.3}%
\contentsline {section}{\numberline {3.4}NATS operators}{8}{section.3.4}%
\contentsline {section}{\numberline {3.5}What “making yourself audit\sphinxhyphen {}ready” means}{8}{section.3.5}%
\contentsline {chapter}{\numberline {4}Audit\sphinxhyphen {}ready checklist}{9}{chapter.4}%
\contentsline {section}{\numberline {4.1}A. Scope and data map}{9}{section.4.1}%
\contentsline {section}{\numberline {4.2}B. Keys and encryption}{9}{section.4.2}%
\contentsline {section}{\numberline {4.3}C. Access}{9}{section.4.3}%
\contentsline {section}{\numberline {4.4}D. Integrity and backup}{9}{section.4.4}%
\contentsline {section}{\numberline {4.5}E. Logging}{10}{section.4.5}%
\contentsline {section}{\numberline {4.6}F. Contracts (counsel)}{10}{section.4.6}%
\contentsline {section}{\numberline {4.7}G. Independent audit of \sphinxstyleemphasis {you}}{10}{section.4.7}%
\contentsline {chapter}{\numberline {5}How to use this pack}{11}{chapter.5}%
\contentsline {chapter}{\numberline {6}What we verified about Peergos (EU)}{13}{chapter.6}%