Stored PQC Probe Run

Run #31

Completed Oct 17, 2026, 17:36:08 UTC UTC

Integrity verified

The local retained inputs reproduce their stored digest. Public metadata redacts credential-bearing URLs; this is local consistency, not externally anchored transparency.

Endpoints
1
Controls
Passed
Integrity
Valid
Legacy
No
Current probe age
fresh (48-hour window)
Registry
v1

Execution Context

Run metadata

Schema version
1
Probe version
pqc-probe/2.0.0
Started
Oct 17, 2026, 17:36:06 UTC UTC
Completed
Oct 17, 2026, 17:36:08 UTC UTC
Vantage
conf-inference
Node
v24.14.1
OpenSSL
3.5.5
Run digest
7f2f8444cf053578b60d65fe6528e9a3c20261742dd223140447ab95321e1791

Digests detect changes inside the stored record. They are not a signature or an externally anchored transparency log, so they do not prove who controlled the database at collection time. Endpoint binding below is a current assessment — computed at request time — not a claim from this run.

Probe policy
{
  "digest_version": 2,
  "hybrid_groups": [
    "X25519MLKEM768",
    "SecP256r1MLKEM768",
    "SecP384r1MLKEM1024"
  ],
  "classical_groups": [
    "X25519",
    "secp256r1",
    "secp384r1"
  ],
  "tls12_baseline": true,
  "authenticate": true,
  "max_attempts_per_endpoint": 256,
  "max_resolved_addresses": 16,
  "max_endpoints_per_run": 64,
  "max_run_attempts": 4096,
  "max_artifact_bytes": 1048576
}
Local controls
{
  "ok": true,
  "supportedGroups": [
    "X25519MLKEM768",
    "SecP256r1MLKEM768",
    "SecP384r1MLKEM1024",
    "X25519",
    "secp256r1",
    "secp384r1"
  ],
  "unsupportedGroups": [],
  "positive": {
    "X25519MLKEM768": {
      "ok": true,
      "detail": "local handshake completed"
    },
    "SecP256r1MLKEM768": {
      "ok": true,
      "detail": "local handshake completed"
    },
    "SecP384r1MLKEM1024": {
      "ok": true,
      "detail": "local handshake completed"
    },
    "X25519": {
      "ok": true,
      "detail": "local handshake completed"
    },
    "secp256r1": {
      "ok": true,
      "detail": "local handshake completed"
    },
    "secp384r1": {
      "ok": true,
      "detail": "local handshake completed"
    }
  },
  "negative": {
    "ok": true,
    "detail": "refused as expected (tls-alert, alert 40)"
  }
}

Measured Endpoints

Endpoints in this run

Run JSON

prem

gateway.prem.io:443

Hybrid TLS observed · 2/2 addresses sampled

Hybrid TLS observed
Endpoint
gateway.prem.io:443
SNI
gateway.prem.io
Route scope
public-api
Attempts
16
Current binding
Not currently bound
Binding check
—

Recorded claims

ClaimEvidence levelMeasuredSupporting attempts
Hybrid TLS observedauthenticatedOct 17, 2026, 17:36:08 UTC UTC2854, 2862
Classical fallback observedauthenticatedOct 17, 2026, 17:36:08 UTC UTC2857, 2858, 2859, 2865, 2866, 2867

Handshake attempts (16)

#ProfileOutcomeGroupTLSAuthenticatedPeer SPKIArtifacts
2854hybrid [X25519MLKEM768]NegotiatedX25519MLKEM768TLSv1.3Yes1237fc01f0233457…server-hello-capture
2855hybrid [SecP256r1MLKEM768]tls-alert — 000D30BA8A750000:error:0A000410:SSL routines:ssl3_read_bytes:ssl/tls alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:918:SSL alert number 40——No——
2856hybrid [SecP384r1MLKEM1024]tls-alert — 000D30BA8A750000:error:0A000410:SSL routines:ssl3_read_bytes:ssl/tls alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:918:SSL alert number 40——No——
2857classical [X25519]NegotiatedX25519TLSv1.3Yes1237fc01f0233457…server-hello-capture
2858classical [secp256r1]Negotiatedsecp256r1TLSv1.3Yes1237fc01f0233457…server-hello-capture
2859classical [secp384r1]Negotiatedsecp384r1TLSv1.3Yes1237fc01f0233457…server-hello-capture
2860tls12-baselineNegotiated—TLSv1.2Yes1237fc01f0233457…server-hello-capture
2861defaultNegotiatedX25519MLKEM768TLSv1.3Yes1237fc01f0233457…server-hello-capture
2862hybrid [X25519MLKEM768]NegotiatedX25519MLKEM768TLSv1.3Yes1237fc01f0233457…server-hello-capture
2863hybrid [SecP256r1MLKEM768]tls-alert — 000D30BA8A750000:error:0A000410:SSL routines:ssl3_read_bytes:ssl/tls alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:918:SSL alert number 40——No——
2864hybrid [SecP384r1MLKEM1024]tls-alert — 000D30BA8A750000:error:0A000410:SSL routines:ssl3_read_bytes:ssl/tls alert handshake failure:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:918:SSL alert number 40——No——
2865classical [X25519]NegotiatedX25519TLSv1.3Yes1237fc01f0233457…server-hello-capture
2866classical [secp256r1]Negotiatedsecp256r1TLSv1.3Yes1237fc01f0233457…server-hello-capture
2867classical [secp384r1]Negotiatedsecp384r1TLSv1.3Yes1237fc01f0233457…server-hello-capture
2868tls12-baselineNegotiated—TLSv1.2Yes1237fc01f0233457…server-hello-capture
2869defaultNegotiatedX25519MLKEM768TLSv1.3Yes1237fc01f0233457…server-hello-capture
Resolved addresses
[
  "172.67.149.107",
  "104.21.29.153"
]
Stored classification JSON
{
  "addressesResolved": 2,
  "claims": [
    "hybrid-tls-observed",
    "classical-fallback-observed"
  ],
  "claimEvidence": {
    "hybrid-tls-observed": [
      0,
      8
    ],
    "classical-fallback-observed": [
      3,
      4,
      5,
      11,
      12,
      13
    ],
    "inconclusive": []
  },
  "display": "hybrid-observed",
  "hybridObserved": [
    "X25519MLKEM768"
  ],
  "classicalFallback": "observed",
  "defaultNegotiated": "X25519MLKEM768",
  "reasons": [
    "a classical-only handshake completed — hybrid remains optional"
  ]
}