# GShips offline review-notes worksheet Status: blank notes companion; not a decision bundle Packet: `systems:cybersecurity` Packet SHA-256: `c143c856d4978f824701c6831dcc968482b4215f700f53579ca3d4d6155f9b0d` Release: `public-alpha-2026-07-26-research-visuals-r14` Source commit: `3eb036fce3d711336c8c605625895e8a2e799ab0` This readable worksheet is for local notes only. It cannot satisfy the closed decision-bundle schema and is not input to the validator. Use the fingerprinted JSON template for any future structured decision. This worksheet appoints nobody and records no completed review. Do not put identity documents, private contact data, medical or accessibility records, confidential conflict evidence, controlled material, or exploit details here. Keep notes offline until a separately authorized private handoff exists. ## Reviewer declaration Opaque public reviewer ID: Public label: Controlled scope codes: Qualification basis: Independence status and bounded basis: Conflict public summary: Compensation status and public summary: AI assistance and human-verification statement: Publication consent selections: ## 1. Cybersecurity, software assurance & recovery - Record: `system:cybersecurity` - Record SHA-256: `48a0199de1d45db9fdb9aad2b20fcd4d219be2d336a58c2b4b44921d27a82a21` - Public record: /systems/cybersecurity - Minimum independent approvals: 1 - Required scope groups: bounded-competence (defensive-cyber-safety, security-assurance) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 2. Generation-ship security protects a civilization’s ability to operate, repair, govern, learn, and recover without an external rescuer—not merely its secrets. - Record: `claim:claim-12-01` - Record SHA-256: `908842da73f03771a9e09cc29bdc8e3863610f7ab9de665f452f153f7bb618b1` - Public record: /claims/claim-12-01 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, governance-law-rights, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 3. Space-sector guidance and protocol-security reports, operational-technology, software-supply-chain, zero-trust, post-quantum, and cyber-resilience standards provide relevant but fragmented reference points; their existence does not establish integration or assurance. - Record: `claim:claim-12-02` - Record SHA-256: `0f49699074aad1bdc4026a7e08cecd517f96beb614fa4055762c508de9fa31fc` - Public record: /claims/claim-12-02 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, dual-use-risk, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 4. Secure firmware-update patterns, platform recovery, software-component inventories, bundle-layer security for disrupted networking, and a publicly described CCSDS-oriented space-data-link cryptography library exist in different contexts. Availability does not establish compatibility, conformance, flight qualification, safe integration, or century maintenance. - Record: `claim:claim-12-03` - Record SHA-256: `6055efdd9314736b322ecafce96268e59c3ddc2c7874b92f43b11b7494689e92` - Public record: /claims/claim-12-03 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, dual-use-risk, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 5. Within the public sources sampled for this foundation draft, we did not identify a generation-ship cybersecurity standard or a demonstrated century-scale cryptographic deployment. - Record: `claim:claim-12-04` - Record SHA-256: `1f2f998d50f9608459ee4d3da4ac355a5bf83f8c7d328e5d931ade7d5e4ec478` - Public record: /claims/claim-12-04 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 6. Trust anchors, identity, secure time, revocation, incident command, threshold recovery, crypto-agile migration, anti-rollback, and archival signature interpretation must work locally after permanent loss of Earth. - Record: `claim:claim-12-05` - Record SHA-256: `2811cbe867ae12c3b3d54f9da45439d26535ec4349f41ae4a7cb36eb37ea26a1` - Public record: /claims/claim-12-05 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, governance-law-rights, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 7. Insiders, collusion, governance capture, compromised suppliers, corrupted hardware, malicious maintenance, radiation faults, operator error, and generational loss of expertise must be addressed without turning safety monitoring into surveillance or political control. - Record: `claim:claim-12-06` - Record SHA-256: `e661cc2789a8cd078b10a5fa6f5f4bb267c1dcdcc4156a6fd1870fa857a41db2` - Public record: /claims/claim-12-06 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, governance-law-rights, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 8. Onboard manufacturing makes malicious designs, poisoned toolchains, compromised metrology, counterfeit replacement parts, and configuration drift cyber-physical threats. - Record: `claim:claim-12-07` - Record SHA-256: `aa41b5d69f1e2cb946f156453cc5e43165f992ffba714ec0b1562413e4751e5c` - Public record: /claims/claim-12-07 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 9. Disconnected trust fabrics, update airlocks, recovery vaults, and cyber ranges benefit critical infrastructure and remote industry. - Record: `claim:claim-12-08` - Record SHA-256: `cf9e9af24876befe4386e5d20c5bd3940c82a2f55d410ae762b76cc43357ca22` - Public record: /claims/claim-12-08 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, dual-use-risk, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 10. Crypto agility and toolchain escrow reduce obsolescence risk in medical, energy, transport, and public systems. - Record: `claim:claim-12-09` - Record SHA-256: `4c3588aab47e1175acc7a32a66fd16e23f01df3fd603f3d4005e2e5503935290` - Public record: /claims/claim-12-09 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 11. Mixed crews must repeatedly isolate a compromised zone, maintain life support, investigate locally, rebuild from known-good material, and rejoin safely. - Record: `claim:claim-12-10` - Record SHA-256: `718e87306ab83c20b2c477e928406ce5697e01b1a5b64ab9cde6d6fbcbe148be` - Public record: /claims/claim-12-10 - Minimum independent approvals: 2 - Required scope groups: domain-method (defensive-cyber-safety, dual-use-risk, governance-law-rights, security-assurance); rights-public-interest (affected-public-rights) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 12. The Application of Security to CCSDS Protocols - Record: `claim-source:src-cr-ccsds-350-0-g-3` - Record SHA-256: `44f5371a3c01028d94ba87eb2c3367b47b781a3fe2f7de8e0bb5c7486278d8fb` - Public record: https://public.ccsds.org/Pubs/350x0g3.pdf - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 13. Software Bill of Materials - Record: `claim-source:src-cr-cisa-sbom` - Record SHA-256: `d551139e9329c0f04e2480582f3dd9123e7d717b8bfedf5cb6141bc087053d16` - Public record: https://www.cisa.gov/sbom - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 14. A Firmware Update Architecture for Internet of Things - Record: `claim-source:src-cr-ietf-rfc9019-suit` - Record SHA-256: `f89082ee842c244fde0169bd864fb0a0b2e4390d2b8bda120bbe1fcb414b62e7` - Public record: https://www.rfc-editor.org/rfc/rfc9019 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 15. The State of CryptoLib – The Open-Source Satellite Cryptography Library - Record: `claim-source:src-cr-nasa-cryptolib-2023` - Record SHA-256: `841fcaee2944c6aef6a4e4b5275ddaaea99533977c6de713671c428d94b6998c` - Public record: https://ntrs.nasa.gov/citations/20230015937 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 16. Space Security: Best Practices Guide - Record: `claim-source:src-cr-nasa-space-security-bpg-revb` - Record SHA-256: `49def0ff9598b6f4abebd7c72c8abe70acd2cba861d8cb9407389b95a0ef3d94` - Public record: https://swehb.nasa.gov/download/attachments/166592616/Space%20Security%20Best%20Practices%20Guide%20BPG%20REV%20B.pdf?api=v2 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 17. Space System Protection Standard - Record: `claim-source:src-cr-nasa-std-1006a` - Record SHA-256: `21bc08c8476b722c9011a875a0feeef60390048860f419d797f96be3a5cf998a` - Public record: https://standards.nasa.gov/standard/NASA/NASA-STD-1006 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 18. Security and Privacy Controls for Information Systems and Organizations - Record: `claim-source:src-cr-nist-controls-80053r5` - Record SHA-256: `efe4dc6860fbdda228dced85b87695df8d60684aeb6526e328be4724db7cc583` - Public record: https://doi.org/10.6028/NIST.SP.800-53r5 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 19. Considerations for Achieving Crypto Agility: Strategies and Practices - Record: `claim-source:src-cr-nist-crypto-agility-cswp39u1` - Record SHA-256: `e00c46443bd97a74130ad2e19af942cfe9a635c7eea66e135de4171632673b05` - Public record: https://csrc.nist.gov/pubs/cswp/39/upd1/considerations-for-achieving-crypto-agility/final - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 20. Developing Cyber-Resilient Systems: A Systems Security Engineering Approach - Record: `claim-source:src-cr-nist-cyber-resilience-800160v2r1` - Record SHA-256: `44c9cb7acf30fe7dae9002044900433af81212da661b965f9264af72a409aec1` - Public record: https://doi.org/10.6028/NIST.SP.800-160v2r1 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 21. Module-Lattice-Based Key-Encapsulation Mechanism Standard - Record: `claim-source:src-cr-nist-fips203-mlkem` - Record SHA-256: `a8bc98ef3f8daf79edc2206df6273a4f8e046a98b172df40a11061d4b936f78a` - Public record: https://doi.org/10.6028/NIST.FIPS.203 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 22. Module-Lattice-Based Digital Signature Standard - Record: `claim-source:src-cr-nist-fips204-mldsa` - Record SHA-256: `4b47fc94489002ab20d4e7858bcf1ddfce9f09ec939fa84ced8271cb124eba1e` - Public record: https://doi.org/10.6028/NIST.FIPS.204 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 23. Platform Firmware Resiliency Guidelines - Record: `claim-source:src-cr-nist-firmware-800193` - Record SHA-256: `08984a00ed4540ac34b3290412d4c5c6eddd595f4207fee8aa92a63c48b9017c` - Public record: https://doi.org/10.6028/NIST.SP.800-193 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 24. Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile - Record: `claim-source:src-cr-nist-incident-80061r3` - Record SHA-256: `5f3dd381a84f21187a92324d4aa5da91ce04e14d59aef5f5faaca6227359d59d` - Public record: https://doi.org/10.6028/NIST.SP.800-61r3 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 25. Recommendation for Key Management: Part 1 — General - Record: `claim-source:src-cr-nist-key-management-80057p1r5` - Record SHA-256: `8de5e1eb786969d11a6a1544085a1663f7c54cfb69eb79f4de3da9231844c3cf` - Public record: https://doi.org/10.6028/NIST.SP.800-57pt1r5 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 26. Guide for Cybersecurity Event Recovery - Record: `claim-source:src-cr-nist-recovery-800184` - Record SHA-256: `d43cc61a580591a7ef3ddd073f2913df1e480bf7d7866279bca0d53880fd780c` - Public record: https://doi.org/10.6028/NIST.SP.800-184 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 27. Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations - Record: `claim-source:src-cr-nist-scrm-800161r1u1` - Record SHA-256: `02be470198b0c48432a90e4c5ac8374c588bad818fe7b37a7b663719ccab90bf` - Public record: https://doi.org/10.6028/NIST.SP.800-161r1-upd1 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 28. Secure Software Development Framework (SSDF) Version 1.1 - Record: `claim-source:src-cr-nist-ssdf-800218` - Record SHA-256: `bda553d2c9f6bc9091b819eb153491cf8392cac73836f86a15eefee22fac1003` - Public record: https://doi.org/10.6028/NIST.SP.800-218 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 29. Zero Trust Architecture - Record: `claim-source:src-cr-nist-zero-trust-800207` - Record SHA-256: `4084c1d50c6edb3efc017ff0bfe23d5280297df0258c440ca27973d10702e901` - Public record: https://doi.org/10.6028/NIST.SP.800-207 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 30. Electrical, Electronic, and Electromechanical Parts Assurance Standard - Record: `claim-source:src-im-nasa-eee-873910` - Record SHA-256: `7de974366c68ddd53ce47a7829040b0f7d644de2713f873827f7eacbe97c2287` - Public record: https://standards.nasa.gov/standard/NASA/NASA-STD-873910 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 31. Metrology and Calibration - Record: `claim-source:src-im-nasa-metrology-873912` - Record SHA-256: `8fa80c312101f162e43d1a51a136596e2cd0ff81f1b218ff7227df062b3e3540` - Public record: https://standards.nasa.gov/standard/NASA/NASA-STD-873912 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 32. Additive Manufacturing Requirements for Spaceflight Systems - Record: `claim-source:src-im-nasa-std-6030` - Record SHA-256: `7e6a5d45f27e760d46772f9f030ecd9397047f8274aa4525946c18e6d6b34d90` - Public record: https://standards.nasa.gov/standard/NASA/NASA-STD-6030 - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 33. RFC 9172: Bundle Protocol Security - Record: `claim-source:src-pn-ietf-bpsec` - Record SHA-256: `266d01cc374ffb39ae67ac92d5819b03617401cdf12935e25b0dea13f4a3a1d4` - Public record: https://www.rfc-editor.org/rfc/rfc9172.html - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: ## 34. Working Overtime: NASA's Deep Space Atomic Clock Completes Mission - Record: `claim-source:src-pn-jpl-dsac` - Record SHA-256: `eb44d6f5e829543be29e410f9cc10f9588df681ae8fe28478bfb705f4c47c199` - Public record: https://www.jpl.nasa.gov/news/working-overtime-nasas-deep-space-atomic-clock-completes-mission/ - Minimum independent approvals: 1 - Required scope groups: bounded-competence (information-science) Disposition: [ ] approve [ ] revise [ ] contest [ ] reject [ ] recuse Bounded scope: Rationale: Evidence source ID, exact locator, and finding: Proposed correction or recusal reason: What would change this decision: