Credentials
Credentials
Scoped target credentials; remain inside the customer/vendor trust boundary where possible. Proof credentials were ephemeral and excluded from evidence.
SECURITY & DEPLOYMENT
What would a buyer actually have to trust?
Trust boundaries, credentials, network access, retained state and failure posture.
The right question
The right question is not whether TrustGate is “magically safe.” It is what authority, credentials, network access and retained state must be entrusted to it — and how narrowly those privileges can be bounded.
Four principal controls
Network
Network
Use approved target and control endpoints only; production should allowlist the destinations required by the agreed design.
State
State
Retain only action, attempt, expected-outcome, lifecycle and evidence state required for consequence custody. Agree retention and access for each deployment.
Failure posture
Failure posture
No silent retry. Ambiguous execution remains UNKNOWN, and protected continuation remains fenced while external reality is unresolved.
Demonstrated in the Salesforce proof
- Ephemeral proof credentials were excluded from evidence.
- A real Salesforce Developer Edition action committed while the success response was lost.
- UNKNOWN survived restart and external process death; protected continuation was refused pending fresh Salesforce readback.
- The bounded proof did not make a production deployment or full TGAP-PROD certification claim.
Must be agreed or qualified for production
- Deployment location, trust boundaries, credential custody and least-privilege scopes.
- Approved network destinations and customer allowlisting.
- Retained state, access, retention and deletion.
- Operational owner for UNKNOWN, incident handling, disable procedure and recovery.
- Threat model, compromise containment, upgrade qualification and target-specific acceptance.
The proof does not certify these production arrangements. They require customer-specific security, operational and technical qualification.
Security reporting for this public website has a separate route: Report a website security issue.