Preflight ACVP Client

Demo-capable client with production fail-closed; production ACVTS remains externally gated.

Preflight ACVTS Demo Runner

Creates Demo sessions, downloads vector sets, executes through controlled IUT adapters and submits results.

Preflight IUT Adapter SDK

Controlled adapter boundary between validation vectors and implementations under test.

Vector / KAT / Monte Carlo Engine

Deterministic vector execution with evidence records and bounded workloads.

Entropy / DRBG Validation Harness

Health tests and evidence workflow; official entropy validation remains programme-controlled.

FIPS 140-3 Module Test Harness

Module/evidence readiness controls; no CMVP validation is implied.

PQC Interoperability Harness

KEM/signature interoperability and tamper rejection with sensitive-value redaction.

Side-Channel Trace Pipeline

Welch t-test/TVLA-style analysis with raw-trace digesting rather than raw trace evidence storage.

Physical lab / hardware dependent

Fault Injection Orchestrator

Authorized, interlocked campaign orchestration with hard limits and safe shutdown.

Physical lab / hardware dependent

Preflight Engagement Manifest Service

Exact-SHA immutable scope, ownership classification and tamper verification.

Preflight Evidence Vault

Immutable evidence records, bundles and chain-of-custody controls.

Controlled Method / Competence Engine

Personnel competence, method activation, authorization and reviewer-separation controls.

Preflight Report Forge & Release Gate

Deterministic reports, digest verification, technical/quality review and approved-signatory release.

Accreditation Readiness Pack Generator

Creates tamper-evident readiness evidence; never creates external accreditation.

Full-Stack Application Security Harness

Controlled AppSec evidence profile for auth, sessions, inputs, secrets, dependencies, logging and rate controls.

Smart Contract / Protocol Property Harness

Controlled Web3 evidence profile for invariants, privilege, oracle/economic risk and emergency controls.

Mobile / Wallet Security Harness

Controlled wallet profile for key generation/storage, signing boundaries, preview, recovery and address integrity.

Firmware / TEE / Attestation Harness

Secure-boot/update/debug/attestation profile; device testing depends on lab hardware.

Physical lab / hardware dependent

IoT Security Test Harness

Connected-device lifecycle/onboarding/transport/update/API profile; formal certification remains scheme-specific.

Physical lab / hardware dependent

FIDO Readiness Harness

Passkey/WebAuthn/FIDO security evidence profile; official certification requires the applicable recognized path.

Payment Security Readiness Harness

Key, CVM, tokenization, transaction, redaction, segmentation and incident-control profile.

AI / Agent Adversarial Evaluation Harness

Tool authorization, prompt injection, data exfiltration, sandboxing, approvals and auditability profile.

Supply-Chain / Build Provenance Harness

SBOM, provenance, signature, isolation, artifact digest, approval and vulnerability-response profile.

Cloud / Infrastructure Security Harness

IAM, least privilege, boundaries, secrets, encryption, logging, recovery and drift profile.

PIV / Identity Validation Harness

Executable PIV/identity evidence harness is implemented; official NPIVP/PIV validation remains programme/scope controlled.

Common Criteria / SESIP Evaluation Framework

Executable evidence framework is implemented; official evaluation requires the applicable recognized scheme/laboratory status.

Preflight Standards Watcher

Digest-based standard snapshot/change detection and QMS evidence generation are implemented; authoritative-source ingestion is configured per source.

Preflight Proficiency Runner

Numeric and qualitative proficiency exercises and evidence are implemented; external/interlaboratory participation depends on real providers.