Put the review documents in one place.
A public review packet for WND Terminal 1.0.308, with source provenance and clear deployment boundaries.
The public security-review ZIP combines the reviewed security page, published accessibility/VPAT report, policy settings, a two-page architecture note, the licensing promise and a source dependency inventory pinned to WND Terminal 1.0.308. It contains public materials; additional NDA documents are requested separately.
Request the public review packet
Complete the form to download the ZIP. It contains public review materials; additional NDA documents are available separately.
What is inside
- Security overview, rebuilt from the reviewed site copy
- Published accessibility and VPAT report, within its stated assessment scope
- Policy settings reference
- Two-page architecture and data-flow note
- Licensing promise and separate-product scope
- SPDX 2.3 source dependency inventory for release 1.0.308
- Source provenance, packet manifest and SHA256 checksums
The PDFs and ZIP are rebuilt with the site. The source inventory is pinned to the exact shipped tag and its dependency locks. It includes build/development, optional and platform-specific entries; it is not a per-platform binary attestation or vulnerability scan.
Read the security page, accessibility information and policy reference directly, or request additional NDA materials.
Questions
Is the source inventory a binary or vulnerability attestation?
No. It inventories third-party dependencies declared in the shipped Cargo, UI npm and extension locks, including build/development, optional and platform-specific entries. License conclusions remain NOASSERTION. It is not a per-platform binary inventory, vulnerability scan or license audit.
Does the packet establish code signing or certification?
No. Release 1.0.308 installers are unsigned while signing certificates are pending. The packet preserves the published controls and report scope; it does not create a signing, certification or new accessibility assessment.
Do we need to give you host data?
No. The request asks for business contact details, and the documents contain public review material. Discuss any later proof of value around your own systems and approved data-handling rules.
Walk the controls with your reviewers.
Agree the deployment, model endpoint, storage and action policy, then validate them on your hosts during a free proof of value.