Human surface
Pass+ and companion tools
BetaPass+ (the human ceremony client that produces a request-bound proof without leaving a reusable secret behind, similar in spirit to how a hardware security key finishes a WebAuthn ceremony) is the piece a person uses. It is a client application and a browser extension that produce a one-shot, request-bound proof for the specific action a user is about to take, without ever emitting a stored password or a reusable token that could be captured and replayed. Companion tools (Codebook, Desktop, and E6 Vault) support puzzle artifacts, workstation packaging, and offline .r6 envelopes.
Pass+ six-zone ceremony
Six-zone Pass+ ceremony with private phi to bearings
Synonym vs password
Synonym loop versus password or passkey comparison
What Pass+ does
Pass+ is the human-facing ceremony client and browser extension for producing request-bound proofs.Shippingclient/ and client-extension/ implementations.
- A ceremony client application for interactive proof production, so a human can approve a specific request without producing a reusable credential in the process.
- A browser extension path so the ceremony can happen inside an existing session in the user’s current browser, next to the app they were about to act on.
- Beta status: the client and extension are implemented and running, and their interfaces may still shift before general availability.
- Nothing typed becomes a long-lived credential; the ceremony produces a bearing (one of six directional choices a prover makes each round; bearings are consumed by observation and cannot be replayed) sequence that is consumed on submission.
Private Synonym Map
Pass+ implements the human Private Synonym Map: six public puzzle zones mapped to six private bearings or personal icons that only the user knows. Observers see ambiguous tokens rather than a secret; the server validates the map for this round and emits a request-bound (cryptographically tied to this exact HTTP method, endpoint, body hash, policy, and timestamp) proof for Gate (the enforcement component: a reverse proxy, SDK middleware, MCP wrapper, or sidecar that sits between callers and a protected route and requires a valid envelope for each request) to accept. A shoulder-surfer, a keylogger, or a phishing page captures the visible tokens and gains nothing reusable from them.
Where it fits in a real deployment
Gate protects the endpoint (a single API route or agent tool placed behind Gate; the unit of value on every commercial page). Pass+ is how a human proves for a specific request against that endpoint. Machine-to-machine paths use a compiled twin (the per-identity binary a workload runs to prove itself, produced by the Foundry minting appliance) that produces envelopes without a human in the loop; Pass+ covers the interactive case where the human is the prover. Authentication (OIDC, SAML, mTLS) still terminates upstream as usual; Pass+ replaces the authorization step that today is a reusable session cookie or an API key pasted into a form.
For the security architect
- Deployment shape: a ceremony client the user installs, or a browser extension that finishes the ceremony inside their current browser session.
- Failure mode: if the ceremony cannot complete, the request produces no proof and Gate rejects at stage 1; there is no partial-credit fallback to a stored password.
- Observability: every ceremony result surfaces at Control (the control plane: a registry of active identities plus the durable nonce ledger; conceptually the token-issuer, revocation registry, and audit log for one-shot proofs combined) as a normal access log with the endpoint_id the user was acting on.
- Coexistence: sits behind the same reverse proxy, API gateway, or service mesh you already run, and does not require replacing your identity provider.
Codebook
CLI for Pass+ puzzle and synonym-map artifacts. Secondary tool, not a primary plane.
Codebook CLI
CLI proof toolchain strip: init, prove, export, verify
Codebook is a shipping CLI (v0.2.0) for working with ENI6MA codebook artifacts.ShippingCLI v0.2.0 release.
- Command-line tooling over ENI6MA codebook materials, so a developer or an operator can inspect, construct, and validate artifacts without a UI.
- Badge label is Available with a specific released version (CLI v0.2.0), so this is not a placeholder for a future ship.
- Released and Available as CLI v0.2.0.
Desktop
Planned workstation client for Pass+ ceremonies. Roadmap only.
Some operators want a native client for break-glass and air-gapped human approvals, where a browser extension is the wrong packaging. Desktop is the planned packaging for that use. It does not change the envelope contract, and it does not replace Gate.
Desktop is a planned workstation client for Pass+ ceremonies; roadmap only, not for purchase today.RoadmapRoadmap packaging; use Pass+ / Gate today.
Roadmap badge. There is no purchase path today. For human ceremony now, use Pass+ in Beta. For machine callers, use a compiled twin from Foundry with Gate in front of the route.
- Planned workstation client for Pass+ ceremonies; roadmap only, not for purchase today.
- For human ceremony now, use Pass+ in Beta. For machine callers, use Foundry with Gate in front of the route.
- This product does not appear on pricing purchase paths.
E6 Vault
Seal, verify, and open .r6 envelope files for offline proof material. Companion tool, Beta.
E6 Vault seal
Sealed verifiable artifact box for E6 Vault
E6 Vault seals, verifies, and opens .r6 envelopes for offline proof material.ShippingE6/ seal/verify/open path.
- A seal → verify → open lifecycle for .r6 artifacts, so a package can be produced, checked, and consumed without becoming a reusable credential.
- Beta today—available for evaluation, not a finished GA claim.
- Pairs with Pass+ and with offline evaluation workflows where a live network path is not available.