Doctrine
Open trust doctrine
Publicus is not trying to out-volume OSV, NVD, or CISA. It is trying to make AI software-assurance decisions inspectable in public, with a curated registry and a read-only API over signed evidence.
The registry’s value is narrow scope plus public reviewability: AI infrastructure, Canadian trust context, and explicit human decisions on top of primary-source evidence.
What stays public
- Curated component decisions and their rationale.
- Primary-source advisory references and exploited-risk intersections.
- Recent upstream drift and evidence-source coverage.
What stays stewarded
- Registry status transitions remain reviewed, not crowdsourced blindly.
- Dated context signals inform review; they do not silently overwrite signed truth.
- Public APIs remain read-only.