Versioned
Each paper has a version and edition date, with revision notes for later changes.
For IT and security teams
Technical methods you can review.
These three papers cover exposure records, assessment authorization, and AI systems. Each publishes the assumptions and references behind its calculation or control rules.
Continuous exposure management as an evidence system
An architecture that keeps asset identity stable and findings tied to their source. It connects attack paths with threat context, fixes, and verification.
Read whitepaperAuthorization-first assessment and the KernelHawk Baseline score
How the KernelHawk Baseline 1-10 score is calculated, what evidence each of the 20 checks needs, and how open findings lower the score.
Read whitepaperGoverning the AI-era attack surface
An architecture for inventorying AI systems and separating data from tools. It covers write gates, provenance, evaluation, and incident response.
Read whitepaperPublication standard
Show the method behind the conclusion.
These papers publish the choices and calculations behind a KernelHawk result so security teams can evaluate them.
Referenced
External claims link to primary standards, government guidance, or original research.
Limited
Each method names its assumptions and exclusions, including remaining uncertainty.
Actionable
Technical owners get control objectives and measures, followed by a staged adoption plan.