Security principles
Security should be inspectable.
Secrix is designed to use reviewed cryptographic protocols and explicit activation gates rather than proprietary cryptographic algorithms.
Identity and device verification
Device-specific identities, fingerprints, QR verification, revocation, and visible key-change events support trust without silently replacing conversation access.
Encrypted continuity
Versioned conversation state and encrypted recovery packages are intended to preserve readable history across normal restarts, upgrades, and approved device transitions.
Transport resilience
Sequencing, acknowledgements, retry queues, deduplication, catch-up, and health-aware transport failover support reliable communication without weakening content protection.
Secure collaboration
Governed groups, temporary access, approval workflows, administrative boundaries, and tamper-evident audit records are designed to make privileged actions accountable.
Release assurance
Cryptographic changes should remain blocked from release until interoperability, migration, recovery, and regression evidence passes the configured quality gates.