PRODUCT MANUAL

Trusted SIC
Controlled Pilot Guide

Role-based guide for tenant onboarding, RP registration, Passkey approval, multi-CA routing, activation, protected signing and evidence operations.

OPERATING JOURNEY

Sixteen governed tasks.

Tenant onboarding

Define organization, trust boundary, data residency, operators and evidence retention.

Relying-party registration

CA/provider connectors

Configure route, credentials, health, eligibility and approved failover.

Signer identity mapping

Map OIDC subject and verified identity to signing accounts.

Passkey registration

Signing profiles

Configure format, algorithm, provider, verifier and evidence policy.

Create signing request

Submit hashes, signer, context, approval and expiry.

Transaction display

Render document identity, purpose, amount and relying-party facts.

Passkey approval

Generate challenge and verify assertion, origin, RP ID and policy.

Signature activation

Issue short-lived single-use SAD/authorization.

Protected execution

Invoke HSM/QSCD/SAM through the approved provider route.

ASiC packaging

Assemble manifest, detached signatures and supporting evidence.

Timestamp & validation

Collect TSA, certificate path, OCSP/CRL and report.

Status & callbacks

Track asynchronous state and deliver governed notifications.

Failure & recovery

Handle expiry, provider outage, partial verification and approved rollback.

Audit & support

Export correlated evidence, operational metrics and support package.

ADMINISTRATOR CHECKLIST

Approve tenant, RP, provider and profile owners
Freeze supported browsers/authenticators and CA routes
Configure rotation, revocation, retention and incident contacts
Run negative, replay, expiry and failover tests

DEVELOPER CHECKLIST

Use idempotency and correlation for every state change
Never log document contents, credentials, SAD or private key data
Display transaction facts before approval
Persist evidence identifiers and verify final state