Protection contracts
Capability definitions, threat and protection semantics, execution-state rules, quarantine boundaries, and evidence structures make security claims machine-reviewable instead of decorative.
Wardveil Security by GoreeCloud
Protection with visible authority and evidence.
Wardveil Security is GoreeCloud's platform-wide security and protection authority. Version 2.0.0 is currently at Seal under Platform Contract 2.0; deployment remains Development, and Anchor/Stable qualification is blocked on the remaining non-deferrable gates. Its source foundation covers shared security contracts, authorization, execution state, quarantine, evidence, and scanner integration while keeping production acceptance bound to the exact capability and environment.
Security authority
Security is a system, not a badge.
Wardveil provides shared security meaning and governed coordination. The component that actually executes an action keeps its own local authorization, safety, and readback responsibilities.
Runtime authorization
Identity and authentication establish who is acting. Consequential security actions still require scoped authorization, exact targets, and executor-side enforcement.
Evidence and state
Security posture should be supported by current provenance, execution state, diagnostics, receipts, and scope-specific acceptance rather than inferred from installation alone.
Execution path
Protection claims should follow the evidence chain.
Source implementation and green CI establish source evidence only. Broader production protection remains unaccepted wherever deployed providers, credentials, target readback, recovery, integration, or exact-environment acceptance are still open.
Platform relationships
Wardveil protects alongside other authorities without absorbing them.
Privacy Shield
Owns privacy, consent, minimization, data-use, and privacy-status authority. Security evidence may inform privacy decisions without replacing them.
Open Privacy →GoreeCloud Identity
Owns accounts, authentication, sessions, claims, and identity context. Authentication alone is not universal permission for a security action.
GoreeCloud Mesh
Transports approved security signals and evidence across authorized paths while Wardveil retains security semantics and the executor retains local action authority.
Everkeep
Owns continuity, preservation, backup, and recovery. Wardveil can provide security evidence for restore decisions without becoming the recovery authority.
Glaze
Defines how security state is presented without manufacturing that state.
Open Design →Claim discipline
“Protected by Wardveil” must be earned by current, scope-specific evidence.
The Wardveil name, icon, dashboard, source code, scanner availability, or neighboring platform status is not proof that a workload is protected. The represented control must actually be implemented, authorized, enforced, verified, and accepted for the scope being claimed.