Skip to content

The Space Order · V1.0

PacSec covers the CMMC assessment path. SSX360 maps the same authorization through all six Space Order layers and returns signed evidence a reviewer can check offline. Where we name CMMC, that is evidence mapping, not a certification claim. SSX360 holds no CMMC certification.

File
SSX360-CRITERIA-0001
Class
PUBLIC
Collection
Public record
Issued
25 Aug 2026
Rev
V1.0

Method · Named sources, signed evidence, offline verify

Criteria · Operator through Orbit

Six layers. Our own criteria.

The Space Order is SSX360's published criteria set. It traces one authorization from the person who granted it, through the surfaces that act and the signatures that bind, down to the clock that dates the whole record.

Compliance checklists stop at the interface. The Space Order continues through signature, ledger, signal, and orbit, so that a reviewer asking the same question a year later can still answer it.

Verification, not opinion.

Six-layer Space Order stack with a red authorization trace from Operator to Orbit
  1. §1

    Operator

    Ships in review

    Who may act.

    Every authorization traces to a person, or to a governed system with an accountable owner. MCV-1.1 asks for that owner and for the record that states the intent.

    Maps to · MCV-1.1 intent and accountable owner

  2. §2

    Interface

    Ships in review

    Where authority is exercised.

    Consoles, APIs, services, and scripts all act. MCV-1.3 binds the observed identity, action, target, and result back to the authority record that preceded them.

    Maps to · MCV-1.3 identity and action binding

  3. §3

    Signature

    Ships in review

    How authority binds.

    Signatures bind under MCV-1.0, on ML-DSA and SLH-DSA, which NIST standardised in August 2024 as FIPS 204 and FIPS 205. Constant-time code keeps the signing key out of the timing and power traces.

    Maps to · MCV-1.0 criteria and post-quantum migration planning

  4. §4

    Ledger

    Ships in review

    What actually happened.

    Receipts carry a number per actor, so a missing one is answerable by counting. MCV-1.5 reports which receipts an actor numbered and never delivered, then stops short of guessing why.

    Maps to · MCV-1.5 log completeness and gap detection

  5. §5

    Signal

    Criteria

    The physics underneath.

    Correct mathematics still leaks through the hardware that runs it. Minerva recovered ECDSA keys from signature timing in 2020. ISO/IEC 17825 names the power, electromagnetic, and timing tests a Signal review works from, and predictive models track physical-layer drift.

    Maps to · Scoped physical-layer review under a written proposal

    TimesFM and MATLAB/Simulink appear here as review methods for physical-layer drift. They are not named engagements in the public service catalog.

  6. §6

    Orbit

    Criteria

    What everything stands on.

    MCV-1.4 asks whether authority held at the moment of the action, which makes the clock evidence. That clock arrives by GNSS, where the UK Blackett Review reported 4.6 interference events a day at a City of London rooftop feeding financial timing.

    Maps to · MCV-1.4 timing validity, on reference infrastructure named in scope

    A passive chronometric lab demonstration at a Honolulu venue under owner control is in progress, subject to written local coordination. It is a scoped Signal and Orbit proof path, not a public product and not an emergency-network attachment.

Shipping now

  • §1–§4 criteria applied through MCV-1, SSX Terminus, and signed evidence packages
  • Offline verification for delivered evidence via Matrix Scroll 0.7.0
  • Signet-C and Signet-N as supported hardware roots for the issued mark when selected

In progress

  • §5 Signal reviews as scoped physical-layer work under a written proposal
  • §6 Orbit reference checks for timing and position infrastructure named in scope
  • Passive chronometric lab demo at a Honolulu venue under owner control, pending written coordination

Not

  • CMMC certification or C3PAO assessment
  • Facility clearance or ITAR registration
  • A claim that Space Order replaces PacSec program readiness
  • Attachment to emergency call routing or carrier systems
GEO orbital reference diagram

The Space Order is published criteria, not an accredited scheme and not a substitute for a C3PAO assessment. Certification under any named framework remains with that framework's accredited assessors.

Document form: typed dossier, industrial print, brutalist structure. Diagrams are original SSX360 work.