Files
2026-05-21 13:09:55 -07:00

273 lines
11 KiB
HTML

<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Canonical Activity Record - Joseph Goydish</title>
<style>
:root {
color-scheme: dark;
--bg: #090c0f;
--panel: #10161b;
--panel-2: #0d1216;
--ink: #e7ece8;
--muted: #9aa7a0;
--line: #2a343a;
--green: #5aa36a;
--blue: #6aa6d8;
--amber: #c79a45;
--mono: #172027;
}
* { box-sizing: border-box; }
body {
margin: 0;
background:
linear-gradient(90deg, rgba(231,236,232,.035) 1px, transparent 1px),
linear-gradient(0deg, rgba(231,236,232,.025) 1px, transparent 1px),
radial-gradient(circle at 15% 0%, rgba(106,166,216,.10), transparent 28%),
var(--bg);
background-size: 30px 30px, 30px 30px, auto, auto;
color: var(--ink);
font-family: "Aptos", "Segoe UI", system-ui, sans-serif;
line-height: 1.5;
}
a { color: var(--blue); }
.wrap {
max-width: 1140px;
margin: 0 auto;
padding: 30px 20px;
}
header {
border-bottom: 1px solid var(--line);
background: rgba(9,12,15,.92);
}
.eyebrow {
margin: 0 0 10px;
color: var(--blue);
font-size: .76rem;
font-weight: 850;
letter-spacing: .11em;
text-transform: uppercase;
}
h1 {
max-width: 940px;
margin: 0;
font-size: clamp(2.1rem, 5vw, 4.45rem);
line-height: 1;
letter-spacing: 0;
}
h2 {
margin: 0 0 14px;
font-size: 1.12rem;
letter-spacing: 0;
}
h3 {
margin: 0 0 8px;
font-size: 1rem;
}
p { margin: 0 0 14px; }
.lede {
max-width: 840px;
margin-top: 16px;
color: var(--muted);
font-size: 1rem;
}
.actions, .chips {
display: flex;
flex-wrap: wrap;
gap: 8px;
}
.actions { margin-top: 20px; }
.button {
display: inline-flex;
align-items: center;
min-height: 40px;
padding: 9px 13px;
border: 1px solid var(--line);
border-radius: 0;
background: var(--panel);
color: var(--ink);
text-decoration: none;
font-weight: 760;
}
.button.primary {
border-color: var(--green);
background: #14301f;
color: #eaffef;
}
main .wrap {
display: grid;
gap: 18px;
}
section, .card, .stat {
border: 1px solid var(--line);
border-radius: 0;
background: rgba(16,22,27,.94);
}
section { padding: 20px; }
.stat-grid, .card-grid {
display: grid;
gap: 12px;
grid-template-columns: repeat(auto-fit, minmax(235px, 1fr));
}
.stat, .card { padding: 14px; }
.label {
display: block;
margin-bottom: 5px;
color: var(--muted);
font-size: .72rem;
font-weight: 850;
letter-spacing: .08em;
text-transform: uppercase;
}
.chip {
display: inline-flex;
width: fit-content;
border-radius: 0;
padding: 3px 7px;
color: #07100b;
font-size: .72rem;
font-weight: 850;
}
.public { background: var(--green); }
.record { background: var(--blue); }
.hash { background: var(--amber); }
table {
width: 100%;
border-collapse: collapse;
font-size: .91rem;
}
th, td {
border-bottom: 1px solid var(--line);
padding: 10px 8px;
text-align: left;
vertical-align: top;
}
th {
color: var(--muted);
font-size: .72rem;
letter-spacing: .06em;
text-transform: uppercase;
}
code {
border: 1px solid #243039;
border-radius: 0;
background: var(--mono);
color: #dfe8e2;
padding: 2px 5px;
font-family: "Cascadia Mono", Consolas, monospace;
word-break: break-word;
}
footer {
border-top: 1px solid var(--line);
color: var(--muted);
}
@media (max-width: 720px) {
table { font-size: .84rem; }
th, td { padding: 8px 6px; }
}
</style>
</head>
<body>
<header>
<div class="wrap">
<p class="eyebrow">Canonical Activity Record</p>
<h1>Proof-of-work ledger for public records, submissions, hashes, and anchor trails.</h1>
<p class="lede">This page is a front index for activity that can be checked: public records, certificate exhibits, submission receipts, DKIM/e-signed evidence, signed ledger entries, and fixed hashes. The full running record stays in the ledger repository.</p>
<div class="actions">
<a class="button primary" href="https://github.com/JGoyd/Running-Ledger">Open Running Ledger</a>
<a class="button" href="./anchors/">Anchor Index</a>
<a class="button" href="./canonical/identity-attestation.txt.asc">Identity Attestation</a>
</div>
<div class="stat-grid" style="margin-top: 22px;">
<div class="stat"><span class="label">Holder</span><strong>Joseph R. Goydish II</strong></div>
<div class="stat"><span class="label">Canonical role</span><strong>Activity index and verification surface</strong></div>
<div class="stat"><span class="label">OpenPGP</span><code>4A04 1F50 6D89 4F5E E391 7438 6487 8B56 A2EB 2D11</code></div>
</div>
</div>
</header>
<main>
<div class="wrap">
<section>
<h2>Primary Anchors</h2>
<div class="card-grid">
<article class="card">
<div class="chips"><span class="chip public">Certificate exhibit</span><span class="chip hash">Hash backed</span></div>
<h3>CNVD / CNCERT records</h3>
<p>Two CNVD/CNCERT certificate records name Joseph Goydish as contributor for Apple vulnerability records.</p>
<a href="./anchors/">Open anchor index</a>
</article>
<article class="card">
<div class="chips"><span class="chip public">NVD / CISA</span><span class="chip record">Public API</span></div>
<h3>Five Apple CVE rescore records</h3>
<p>Three CVSS 10.0 records and two CVSS 9.8 records tied to public vulnrichment filings and NVD scoring-history records.</p>
<a href="./anchors/cisa-nvd-vulnrichment-rescore/">Open rescore anchor</a>
</article>
<article class="card">
<div class="chips"><span class="chip record">Chronology</span></div>
<h3>CERT/CC VINCE trail</h3>
<p>Coordination chronology for VU#395558 and VRF#25-01-MPVDT / gen-41698 predates relevant Apple advisories.</p>
<a href="./anchors/certcc-vince-chronology/">Open chronology anchor</a>
</article>
</div>
</section>
<section>
<h2>NVD / CISA Rescore Records</h2>
<table>
<thead>
<tr><th>CVE</th><th>Score</th><th>Filing</th><th>Public proof</th></tr>
</thead>
<tbody>
<tr><td>CVE-2025-24085</td><td><strong>10.0 Critical</strong></td><td><code>vulnrichment#194</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-24085">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-24085">history API</a> / <a href="https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201">GitHub reference</a></td></tr>
<tr><td>CVE-2025-24201</td><td><strong>10.0 Critical</strong></td><td><code>vulnrichment#194</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-24201">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-24201">history API</a> / <a href="https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201">GitHub reference</a></td></tr>
<tr><td>CVE-2025-43300</td><td><strong>10.0 Critical</strong></td><td><code>vulnrichment#201</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-43300">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-43300">history API</a></td></tr>
<tr><td>CVE-2025-31200</td><td><strong>9.8 Critical</strong></td><td><code>vulnrichment#200</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-31200">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-31200">history API</a> / <a href="https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md">GitHub reference</a></td></tr>
<tr><td>CVE-2025-31201</td><td><strong>9.8 Critical</strong></td><td><code>vulnrichment#200</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-31201">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-31201">history API</a> / <a href="https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md">GitHub reference</a></td></tr>
</tbody>
</table>
</section>
<section>
<h2>CNVD Certificate Exhibits</h2>
<p>Certificate exhibits are listed by record, certificate number, printed contributor, hash, and direct file link. The NVD/CISA rows above are the independently web-checkable vulnerability-record spine.</p>
<table>
<thead>
<tr><th>Record</th><th>Certificate</th><th>Printed contributor</th><th>SHA-256</th><th>File</th></tr>
</thead>
<tbody>
<tr>
<td>CNVD-2025-06744<br><small>Apple iOS / iPadOS buffer overflow</small></td>
<td><code>CNVD-YCGO-202503023656</code></td>
<td>Joseph Goydish</td>
<td><code>352A56FF1319E1B8138B1F4C6F55B652CF09CCD8C6784610E3A3EF6A9A80723C</code></td>
<td><a href="./evidence/TRACK-B-CNVD-2025-06744/evidence/CNVD-2025-06744-YCGO-202503023656-Certificate-2025-03-18.pdf">Open PDF</a></td>
</tr>
<tr>
<td>CNVD-2025-07885<br><small>Apple memory reuse</small></td>
<td><code>CNVD-YCGO-202504012519</code></td>
<td>Joseph Goydish</td>
<td><code>D5BB17D5A27EABD32D272173116C90F89F12CDD912A26969115007383A7F21C8</code></td>
<td><a href="./evidence/TRACK-B-CNVD-2025-07885/evidence/CNVD-2025-07885-YCGO-202504012519-Certificate-2025-04-22.pdf">Open PDF</a></td>
</tr>
</tbody>
</table>
</section>
<section>
<h2>Running Ledger</h2>
<p>The running ledger carries the broader investigative work: submissions, receipts, DKIM/e-signed evidence, references, SHA-256 packet hashes, and signed chronology.</p>
<a class="button primary" href="https://github.com/JGoyd/Running-Ledger">Open Running Ledger</a>
</section>
</div>
</main>
<footer>
<div class="wrap">
<p>Organized as a canonical record. No private keys, credentials, exploit code, or sensitive packet bodies are published here.</p>
</div>
</footer>
</body>
</html>