Operator and continuity

We Are 14 Inc. operates the Emabled reference issuer and is coordinating the initial XCIM v0.x sandbox.

Current operator scope

The deployed reference environment includes the Emabled public console, issuer API, hosted consent surface, company and ESP workspaces, scoped authorizations, private list evaluation and exports, lifecycle worker, Cloud SQL persistence and an OIDC-backed reference exchange. The first public batch, roots and four MuMaps proofs are anchored on Polygon Amoy testnet. The shared XCIM registry and public resolver distribution remain unreleased. Inspect the first batch.

Isolation and key custody

Services run in the dedicated emabled namespace with separate workload identities and least-privilege access. Receipt, relay, revocation, batch and webhook signatures use distinct Ed25519 keys held in Google Cloud KMS. Public verification material is available from the issuer key set.

Public and private boundaries

Public material includes verification keys, protocol metadata and the first testnet batch roots and proof set. Recipient addresses, OAuth secrets or tokens, private application keys and predictable email hashes are not public network data.

Continuity model

Signed historical evidence is designed to remain independently checkable. If an issuer or shared network component is unavailable, cached evidence is bounded by verifier freshness policy and current state eventually becomes indeterminate. The reference sandbox is not a production trust root. The first Amoy snapshot's signed status window has expired; a historical anchor does not renew current permission status or imply continuously refreshed evidence.

Participation

Draft schemas and shared vectors are published. Independent issuer and verifier participation still requires reviewed conformance criteria, current public proofs and independent implementation tests. Registry presence will publish facts; trust remains local policy.

Contact the operator

Network enquiries: contact@xcim.net. Integration support: support@xcim.net. Vulnerability reports: security@xcim.net.