MENU
<

Positive Feedback™ · Technology

Your identity, signed. Keys sealed. Trust assured.

  • Ed25519 SSO and scrypt-hashed PIN login.
  • Always-on monitoring, built into the app source.

FROST IDENTITY · Security API

Version 6.024 release notes
Channel
Release candidate
Build
c139d4c9e
Date
2026-10-17
Sign-in
  • NEWSingle sign-on for every product: one FROST account signs a member in to Positive Feedback, Invoice Maps, Agency Mgmt and Pace Shift.
  • NEWSign in with Google or Apple through the SSO proxy, or with a username and PIN.
  • SECURITYPINs are never stored: FROST keeps only a scrypt hash, with a fresh salt every time a PIN is set.
  • SECURITYThree wrong PINs lock the sign-in until a member of the account opens it. One PIN tried across many members is caught and stopped.
  • SECURITYEvery session is a signed identity (member, account, issued, expires) carrying FROST’s signature. Signing out ends every earlier session of that member.
  • SECURITYEvery SSO hand-off is signed with Ed25519, expires after one minute, can be used once, and is bound to the state and nonce FROST issued.
Signatures
  • SECURITYFROST holds one Ed25519 key pair. The private key never leaves FROST: never in source control, never on a device.
  • SECURITYEvery office and offline mini verifies FROST with its public key.
The vault
  • NEWA manifest of every office and mini: each file hashed with SHA-256, in path order.
  • SECURITYOnly the system owner can seal, from their own terminal with their own key. No page, route, PIN or session can seal.
  • IMPROVEDDA-M keeps a verified copy of every seal.
Active monitoring
  • NEWEvery office is checked against its latest seal on FROST’s own timer, every 5 minutes, on by default.
  • NEWFive results: ok, tampered, unsealed, forged, unsigned.
  • IMPROVEDA drift is reported once per occurrence, by mail, to the system owner.

FROST IDENTITY · Security API · end of release notes