Next step
Talk to us.
Guardian is built and running. Bring your questions about your own estate, and we will walk through how it would sit in front of it.
How it is built
Technical specification
- Gateway
- Serving, with access issued only through a valid, short-lived, task-scoped grant.
- Encryption
- Per-item envelope encryption with a fresh data key per call. No key reuse and no batching, so one compromised item does not unlock the pool.
- Key custody
- Enforced, with platform and vendor principals denied both decryption and data key generation, and the runtime that uses the key unable to rewrite its own policy.
- Audit chain
- Hash-linked and append-only. Dual-axis, so the vendor and each district download their own record.
- Failure mode
- Every path fails closed. Where Guardian is wrong, it is wrong in the direction of less access.
Contact
Alvin Crawford