Starting point
The public repository documents a seven-field Authorization structure, deterministic serialization, ML-DSA-65 signing and verification, nonce-based replay handling and byte-for-byte canonical vectors intended to preserve compatibility across later stages. Build and test commands are published with the source.
What remains open
The repository explicitly states that the proof of concept is not Qryption, is not Qryption Key and contains no hardware or blockchain component. Its RustCrypto ml-dsa dependency is identified as unaudited, the nonce ledger is in memory and expiry handling is not yet enforced with a real clock.
How we test progress
The published tests provide reproducible evidence for key generation, signing, verification, payload tampering, one-time nonce use, context binding and canonical serialization. They do not establish product certification, hardware assurance, production readiness or an independent security audit.
Next step
This prototype is a technical foundation for the private authorization pilot. Later work must preserve the public limitations, version the canonical format and publish new evidence before any capability changes from Prototype or Pilot to Available.