One account of the company, on the forms and on the web.

1. Purpose

This statement records how SSX360 Corp. handles the disclosures, research-security commitments and public-consistency practices that federal research sponsors examine before and during an award. It is written so that a reviewer comparing proposal forms with the company's public presence finds one account, not two.

2. Disclosure practice

1. Every covered individual on a proposal supplies the OSTP common forms (Biographical Sketch; Current and Pending (Other) Support) and holds a current ORCID record whose employment, funding and works entries match those forms.
2. All appointments and positions are disclosed, paid or unpaid, including adjunct, visiting, honorary, advisory and foreign ones, using the same wording on the forms, on ssx360.com, on ryanjamesyork.com and on LinkedIn.
3. Current and pending support is disclosed in full: every research project under consideration or under way, from any source, monetary or in-kind. Unfunded collaborations are disclosed as each sponsor's rules require.
4. Public pages that carry disclosure-relevant facts (people, ownership, partners, collaborators, facilities, funding acknowledgements) are dated and reconciled with the latest forms quarterly and within five business days of any material change. Earlier statements are corrected on the original URL, not deleted.
5. If a form already submitted becomes inaccurate, the contracting or grants officer is notified within five business days of discovery.

3. Foreign talent recruitment programs

SSX360 prohibits participation by its personnel in any malign foreign talent recruitment program as defined in 42 U.S.C. § 19237. Each covered individual certifies this at submission and annually thereafter. The company has no parent, subsidiary, joint venture or offshore affiliate in a foreign country of concern, and no funding, appointments or technology-licensing arrangements with such a country or with an entity on the federal restricted-entity lists.

4. Foreign collaboration and travel

New foreign collaborations are recorded before work begins and disclosed as the sponsor's rules require; a sponsor's concurrence is sought where an award requires it. Foreign travel by covered individuals is logged, and only company-managed devices carrying no unreleased research data travel. Public pages describe international collaborations at the same level of detail as the forms, never more.

5. Export control and publication

The research programme is fundamental research whose results are ordinarily published and shared broadly (NSDD-189). Before any technical release, content is screened against the EAR published-information and fundamental-research provisions (15 C.F.R. §§ 734.7 and 734.8); controlled technical data are never posted. SSX360 holds no ITAR registration, no facility clearance and no CMMC certification, and does not accept controlled work it is not registered or cleared to perform.

6. Cybersecurity posture

Public sites are served over HTTPS with HSTS and a content-security policy. Secrets and deploy keys are held per repository and never committed. Signing keys are held in hardware under stated custody; the independent verifier holds no keys for the systems it verifies. Research data are kept in version control with content-addressed storage and immutable off-site snapshots. The company applies the basic safeguarding requirements of FAR 52.204-21 as its baseline for any federal contract information it may hold.

7. Research integrity

Every quantitative statement in a release carries a claim status (MODELLED, COMPUTED, TO-VERIFY or MEASURED). Release gates are fixed before results are seen; negative results are retained. Released findings are never altered without record; corrections are published on the original URL and listed in a public log. The programme involves no human subjects and no personal data.

8. Points of contact

9. Public profiles reconciled