K11 · state, custody, decision, and release evidence
Cryptographic Transition Workbooks
Direct answer
K11 separates eight component transition workbooks, five open exceptions, rollback evidence, and decision receipts so a system-wide migration cannot be declared complete while component evidence remains degraded.
Evidence and authority boundary. K11 publishes deterministic static models, signed offline reference bundles, synthetic fixtures, review records, decision and receipt chains, public projections, and release-time comparisons. It does not perform live network acquisition, deploy software, operate a facility, make an award, authorize force, certify compliance, or convert a signature into factual truth.
Component portfolio
8component workbooks
5open exceptions
62.62%average evidence completeness
DEGRADEDportfolio state
| Component | Name | State | Evidence | Rollback | Exceptions |
|---|---|---|---|---|---|
| CCW-K11-001 | Protocol negotiation and canonicalization | TESTED | 82% | PASS | 0 |
| CCW-K11-002 | Certificate and trust-chain transition | DEGRADED | 61% | NOT_COMPLETE | 1 |
| CCW-K11-003 | Firmware signing transition | DEGRADED | 58% | NOT_COMPLETE | 1 |
| CCW-K11-004 | Hardware root and secure-element transition | UNAVAILABLE | 44% | NOT_COMPLETE | 1 |
| CCW-K11-005 | Supplier cryptographic capability transition | UNAVAILABLE | 39% | NOT_COMPLETE | 1 |
| CCW-K11-006 | Archive verification and re-signing | DEGRADED | 72% | PASS | 0 |
| CCW-K11-007 | Workload identity transition | TESTED | 76% | PASS | 0 |
| CCW-K11-008 | Evidence signing-service transition | DEGRADED | 69% | NOT_COMPLETE | 1 |
TESTED
Protocol negotiation and canonicalization
82% evidence completeness.
DEGRADEDCertificate and trust-chain transition
61% evidence completeness.
DEGRADEDFirmware signing transition
58% evidence completeness.
UNAVAILABLEHardware root and secure-element transition
44% evidence completeness.
UNAVAILABLESupplier cryptographic capability transition
39% evidence completeness.
DEGRADEDArchive verification and re-signing
72% evidence completeness.
TESTEDWorkload identity transition
76% evidence completeness.
DEGRADEDEvidence signing-service transition
69% evidence completeness.
Exception discipline
| Exception | Component | State | Expiry | Reason |
|---|---|---|---|---|
| CAE-K11-002 | CCW-K11-002 | OPEN | 2026-11-30 | Required supplier, hardware, interoperability, or rollback evidence remains incomplete. |
| CAE-K11-003 | CCW-K11-003 | OPEN | 2026-11-30 | Required supplier, hardware, interoperability, or rollback evidence remains incomplete. |
| CAE-K11-004 | CCW-K11-004 | OPEN | 2026-11-30 | Required supplier, hardware, interoperability, or rollback evidence remains incomplete. |
| CAE-K11-005 | CCW-K11-005 | OPEN | 2026-11-30 | Required supplier, hardware, interoperability, or rollback evidence remains incomplete. |
| CAE-K11-008 | CCW-K11-008 | OPEN | 2026-11-30 | Required supplier, hardware, interoperability, or rollback evidence remains incomplete. |
A transition workbook is planning and evidence structure. It does not prove a production migration, algorithm security, supplier readiness, rollback success, or archive re-signing.