Cybersecurity and critical infrastructure

MITHRIL · CYBERSECURITY

Generated code inherits the network, filesystem and secrets of whatever host runs it - the assumption every breach replays - while defenders must reason over vulnerability data that arrives faster than audits.

Approach

Deny by default is the admission rule, not a hardening add-on: effects are typed and checked before they run. The post-quantum floor (hybrid X25519 + ML-KEM-768, ML-DSA-65) ships as machine-readable coverage, so KEV and CVE feeds become the start of an evidence query, not the boundary itself.

Proof

• Published post-quantum coverage data at kotoba-lang.org (machine-readable, as deployed)
• OaK kernel: fail-closed admission before any effect - public source and conformance suites
• KEV and CVE datasets published at knowledge.kotoba.cloud - the same evidence plane the language's own admission consumes