Preflight Validation Suite

Preflight ACVP Client

Demo-capable client with production fail-closed; production ACVTS remains externally gated.

Preflight ACVTS Demo Runner

Creates Demo sessions, downloads vector sets, executes through controlled IUT adapters and submits results.

Preflight IUT Adapter SDK

Controlled adapter boundary between validation vectors and implementations under test.

Preflight Instrument Adapter SDK

Local-only allow-listed instrument operation boundary with deterministic adapter/registry manifests, secret filtering and bounded digest-first results. Concrete drivers depend on real QMS-controlled equipment.

Physical lab / hardware dependent

Vector / KAT / Monte Carlo Engine

Deterministic vector execution with evidence records and bounded workloads.

Entropy / DRBG Validation Harness

Health tests and evidence workflow; official entropy validation remains programme-controlled.

FIPS 140-3 Module Test Harness

Module/evidence readiness controls; no CMVP validation is implied.

PQC Interoperability Harness

ML-KEM/ML-DSA/SLH-DSA-capable KEM/signature interoperability and tamper rejection with sensitive-value redaction; official algorithm validation remains scheme-controlled.

Crypto Agility & Quantum Readiness Gate

Inventories cryptography, flags quantum-vulnerable public-key dependencies and harvest-now-decrypt-later exposure, requires immutable implementation/test evidence for PQ status, validates hybrid component binding/downgrade resistance/component separation, enforces expanded crypto-agility controls, and blocks unsupported quantum-ready/quantum-resistant/NIST-validation claims.

Side-Channel Trace Pipeline

Welch t-test/TVLA-style analysis with raw-trace digesting rather than raw trace evidence storage.

Physical lab / hardware dependent

Fault Injection Orchestrator

Authorized, interlocked campaign orchestration with hard limits and safe shutdown.

Physical lab / hardware dependent

Preflight Engagement Manifest Service

Exact-SHA immutable scope, ownership classification and tamper verification.

Preflight Evidence Vault

Immutable evidence records, bundles and chain-of-custody controls.

Controlled Method / Competence Engine

Personnel competence, method activation, authorization and reviewer-separation controls.

Preflight Report Forge & Release Gate

Deterministic reports, digest verification, technical/quality review and approved-signatory release.

Accreditation Readiness Pack Generator

Creates tamper-evident readiness evidence; never creates external accreditation.

Full-Stack Application Security Harness

Controlled AppSec evidence profile for auth, sessions, inputs, secrets, dependencies, logging and rate controls.

Smart Contract / Protocol Property Harness

Controlled Web3 evidence profile for invariants, privilege, oracle/economic risk and emergency controls.

Mobile / Wallet Security Harness

Controlled wallet profile for key generation/storage, signing boundaries, preview, recovery and address integrity.

Firmware / TEE / Attestation Harness

Secure-boot/update/debug/attestation profile; device testing depends on lab hardware.

Physical lab / hardware dependent

IoT Security Test Harness

Connected-device lifecycle/onboarding/transport/update/API profile; formal certification remains scheme-specific.

Physical lab / hardware dependent

FIDO Readiness Harness

Passkey/WebAuthn/FIDO security evidence profile; official certification requires the applicable recognized path.

Payment Security Readiness Harness

Key, CVM, tokenization, transaction, redaction, segmentation and incident-control profile.

AI / Agent Adversarial Evaluation Harness

Tool authorization, prompt injection, data exfiltration, sandboxing, approvals and auditability profile.

Supply-Chain / Build Provenance Harness

PFV-020 verifies supplied SBOM, provenance, build-isolation and artifact evidence without executing client code or creating external certification.

Cloud / Infrastructure Security Harness

PFV-021 verifies supplied immutable infrastructure evidence; it does not accept cloud credentials, perform live cloud access or create external certification.

PIV / Identity Validation Harness

Executable PIV/identity evidence harness is implemented; official NPIVP/PIV validation remains programme/scope controlled.

Common Criteria / SESIP Evaluation Framework

Executable evidence framework is implemented; official evaluation requires the applicable recognized scheme/laboratory status.

Preflight Standards Watcher

Digest-based standard snapshot/change detection and QMS evidence generation are implemented; authoritative-source ingestion is configured per source.

Preflight Proficiency Runner

Numeric and qualitative proficiency exercises and evidence are implemented; external/interlaboratory participation depends on real providers.