Morrow
Trust Passport

Proof a buyer can actually review.

A Trust Passport turns signed Airlock evidence into a readable proof: what was checked, what stayed inside the customer boundary, what is blocked, and what remediation evidence exists.

Proof Flow

Airlock evidence -> verify signatures -> privacy CBOM -> remediation proof -> compliance ledger -> shareable Trust Passport

Minimum Access

Input

Signed cryptographic evidence, salted fingerprints, policy output, firmware hashes, and runtime handshake proof.

Blocked

Source code, private keys, secrets, packet payloads, customer records, and unrestricted shell access.

Output

Revocable buyer proof for executives, auditors, vendors, and customer security review.

How a passport is produced

  1. Open Quantum Airlock in the console.
  2. Generate the agent package for your organization and review its redaction policy.
  3. Run the collector inside your boundary so it submits signed evidence.
  4. Generate the privacy CBOM, remediation proof, and Trust Passport from that evidence.
  5. Share a passport only after the evidence behind it has been approved.