Selected work
EvidenceGate
A repeatable quality gate for the material behind a security finding.
PUBLIC TOOL / Python · evidence quality · assessment workflow
EvidenceGate records findings and evidence references, then performs selected checks for integrity, supplied CVSS vectors, HTTP capture structure, optional hostname scope and selected secret patterns. The public project runs locally and does not make network requests.
This portfolio describes its purpose. Current support and behavior belong to the versioned source and documentation.
Open the public repositoryThe problem
A report can look finished while its supporting evidence is incomplete, out of scope or internally inconsistent. Reviewers need explicit checks and clear limits, not an unexplained green badge.
The approach
Track the finding and evidence together. Run configured checks against the supplied material. Treat a passing gate as a statement about those checks, not as confirmation of vulnerability, authorization or analyst approval.
What to inspect
The public repository includes a synthetic quickstart and tests. Its README explains each check, supported inputs, scope behavior and assumptions about the ledger and trusted writer.
Boundaries
Pattern matching is not complete secret redaction. A host policy is not a complete engagement scope engine. The tool cannot establish the authenticity or truth of material supplied to it.