{
 "_ce_e": "Aere Network security score: 0-100, seven weighted axes, every point tied to a measurement listed under it. Unmeasured means zero points and says so. Not an audit; not a claim of safety.",
 "score": 53,
 "max": 100,
 "computedAt": "2026-11-01T02:30:03.387Z",
 "computedFrom": {
  "registry": "729 findings (internal registry)",
  "criticMeasuredAt": "2026-10-31T22:28:54.950Z",
  "fullRunMeasuredAt": "2026-10-31T14:29:22.499Z"
 },
 "axes": [
  {
   "axa": "A. Findings hygiene",
   "puncte": 19,
   "max": 25,
   "nemasurat": false,
   "formula": "25 x (0.7 x share of CRITICAL findings closed + 0.3 x share of the rest closed)",
   "conditii": [
    "share of CRITICAL findings closed, from the 6-hour measurement",
    "share of lower-severity findings closed, from the daily full run (otherwise counted as open)"
   ]
  },
  {
   "axa": "B. Consensus decentralization",
   "puncte": 3,
   "max": 20,
   "nemasurat": false,
   "formula": "8 if >= 3 independent operators + 6 if the Nakamoto coefficient >= 3 + 6 x min(1, validators/21)",
   "conditii": [
    "at least three independent validator operators (today: one, the Foundation)",
    "Nakamoto coefficient of at least 3",
    "at least 21 validators"
   ]
  },
  {
   "axa": "C. Post-quantum in consensus",
   "puncte": 10,
   "max": 15,
   "nemasurat": false,
   "formula": "4 anchor live + 3 quorum at anchors + 2 precompiles + 1 seal cap + 5 x enforced message layers/4",
   "conditii": [
    "post-quantum anchor live at every scheduled anchor height",
    "Falcon seal quorum at anchors",
    "post-quantum precompiles live",
    "seal cap configured",
    "the four consensus message layers ENFORCED (today: emitted, not enforced)"
   ]
  },
  {
   "axa": "D. Keys and custody",
   "puncte": 8,
   "max": 15,
   "nemasurat": false,
   "formula": "15 x share of the six custody conditions met",
   "conditii": [
    "privileged accounts under multisignature or timelock control, with a proven holder for every privileged key (six conditions measured in the internal registry)"
   ]
  },
  {
   "axa": "E. Verification and tests",
   "puncte": 8,
   "max": 10,
   "nemasurat": false,
   "formula": "2 brain negative control + 2 anchor tests + 2 public verifier + 2 formal models all PROVED + 2 CI green",
   "conditii": [
    "negative control of the facts engine passes",
    "anchor tests pass",
    "public verifier up to date",
    "all formal models PROVED",
    "CI green on git.aere.network"
   ]
  },
  {
   "axa": "F. External assurance",
   "puncte": 0,
   "max": 10,
   "nemasurat": false,
   "formula": "6 a published third-party audit + 4 a public bug bounty programme",
   "conditii": [
    "a published third-party security audit",
    "a public bug bounty programme"
   ]
  },
  {
   "axa": "G. Operations",
   "puncte": 5,
   "max": 5,
   "nemasurat": false,
   "formula": "1 point each: site backup, registry timer, fleet access, own alerting, public edge answers",
   "conditii": [
    "site backup fresh",
    "registry timer alive",
    "fleet access verified",
    "alerts go to our own server",
    "public edge answers"
   ]
  }
 ],
 "honest": [
  "Axis F is zero: no third-party security audit exists yet. Axis B is low: one operator, the Foundation, runs all ten validators (ten validators since 2026-09-11). Axis D scores the custody conditions listed under it; the detailed evidence stays in the internal registry. The score is meant to move when those change, not before.",
  "Findings below CRITIC are counted as open unless a full registry run (daily) is fresh; the CRITIC measurement is the 6-hour timer on the operator workstation.",
  "Computed on the operator workstation; if this file is older than 30 hours the page says so."
 ]
}
