Services
Evidence infrastructure for regulated software change
SSX360 is the Agent Authorization Authority — offline-verifiable records for commits, MCP tool surfaces, and agent runs. Compliance mappings are the billing system, not the pitch.
Scoped advisory, Authorization Pilots, Agent Trust, and enterprise rollout. Matrix Scroll remains the open protocol; SSX360 governs authorization and exports proof.
Voluntary framework · SDLC slice
FS AI RMF evidence mapping
Draft control-to-artifact mapping for agent-authored merges, paired with PCI DSS v4.0.1 Req 6.5.1 change-control language. Scoped to change management — not all 230 objectives.
- →Public mapping tables and claims ladder
- →Free self-assessment checklist with maturity bands
- →Sample ssx360.evidence-pack.v1 for assessor review
FS AI RMF program →Protected branches - By consultation
Authorization Pilot
Roll out MCP baselines, signed authorization records, and Scroll Gate — warn-mode first, then enforcement. For security teams blocking agents or startups in SOC 2 windows.
- →MCP manifest baseline + Scroll Gate CI
- →Authorization ledger walkthrough
- →Offline-verifiable evidence export
Request Pilot Consultation →Team & enterprise programs
Hosted control plane
Central policy registry, hosted verification, queryable audit history, and JSON evidence export — keys and repo contents stay local via Matrix Scroll.
- →Team policy registry and member management
- →Hosted POST /api/v1/verify and audit ledger
- →Compliance mappings in evidence-pack export
View engagement models →Offline verification · no platform trust
Assessor-ready evidence export
Export signed evidence packs your assessor verifies in CLI or browser. Produces evidence aligned to FS AI RMF, PCI, DORA, and SSDF language — not certification.
- →ssx360.evidence-pack.v1 schema and sample pack
- →Browser verifier at ssx360.com/verify
- →Detached signatures and compliance_mappings[]
Evidence pack schema →Framework partners · innovators
Ecosystem mapping review
We welcome structured feedback on draft mappings from framework stewards, assessors, and regulated institutions evaluating the artifact gap for AI-assisted SDLC.
- →Mapping feedback via contact form or email
- →Scoped redlines — internal IDs crosswalked to official RCM
- →Optional working session on artifact samples
Share mapping feedback →Annual contracts · procurement-ready
Enterprise compliance program
SSO, custom policy presets, SIEM export roadmap, and dedicated rollout support for payment networks, hyperscale platforms, and regulated banks.
- →Enterprise viability brief and procurement pack
- →Custom framework preset alignment
- →Dedicated support and rollout SLA
Enterprise inquiry →Questions on scope, mapping redlines, or pilot timing — reach mission@ssx360.com or use the contact form. We welcome feedback from framework stewards and assessors.
Contact SSX360