What it is
CoreBond Research Series is an independent technical research series focused on consequential trust decisions in composed systems.
Independent technical research · Todd Kirton
Trust is a decision. What supports it?
Security systems routinely turn credentials, attestations, policy, behavior, and retained state into decisions that grant access, release secrets, preserve sessions, or recover systems. CBRS examines whether those decisions are actually justified—and what changes when their evidence, authority, or assumptions no longer hold.
What this is
A research site for testing the claims behind technical trust.
Why it exists
Modern systems often treat identity, credentials, attestations, policies, logs, or memory as if they prove more than they actually establish.
What it is for
It gives architects, implementers, auditors, standards reviewers, and researchers a vocabulary for asking where evidence, authority, freshness, and responsibility stop.
Why it matters
The failure usually hides in the gap between the signal and the conclusion.
What was observed?
A device response, credential, audit record, behavior pattern, policy result, or past state may be useful evidence. It is not automatically a verdict.
Who had authority?
A valid result in one context can get dragged downstream and treated like it carries more authority than it was ever given.
What changed?
Freshness, recovery, retained memory, failure, and uncertainty change what an old decision can responsibly support.
Who this affects
People responsible for systems where a bad trust decision has consequences.
CBRS is written for engineers, security architects, standards reviewers, technical founders, researchers, and decision-makers working around authentication, device trust, attestation, audit records, policy boundaries, zero trust, and recovery workflows.
It is not a sales pitch, certification claim, or promise that one model fixes everything. It is a structured way to ask better questions before a system quietly talks itself into confidence it has not earned.
A sane place to begin
Thirteen papers. One connected line of inquiry.
The series starts with the questions, then follows the problem through identity, authentication, evidence, authority, memory, recovery, uncertainty, and continuous evaluation. Read in order, or enter through the failure mode that already smells familiar.
Recommended starting points
Three ways into the work—without reading thirteen papers first.
Begin with the question closest to your own system. Each publication stands alone; together they show how the same boundary problem appears across device identity, behavioral evidence, and composed trust decisions.
CBRS-002 — The Device Should Not Know Its Own Identity
For readers working with hardware, embedded systems, provisioning, or device identity.
View publication record →CBRS-006 — Behavior Before Identity
For readers examining anomaly, device behavior, evidence ordering, and proportionate response.
View publication record →CBRS Bounded Trust Framework v1.2
For readers who want the complete analytical model before choosing a source paper.
Understand the framework →Synthesis publication
CBRS Bounded Trust Framework
The framework brings concepts from the series into a common analytical model for examining consequential trust decisions: what supports the decision, where authority stops, what state is being reused, and what uncertainty remains.
Research themes
Use these themes as entry points. The numbering shows publication order; the themes show how the questions connect.
CBRS-000
Foundations and Questions
Establishing the questions that govern the work that follows.
CBRS-001–005
Identity and Authentication
Separating records, credentials, proof, decisions, and time.
CBRS-006 & 008
Evidence and Decision Making
Understanding what evidence supports—and what it does not.
CBRS-007
Authority and Boundaries
Examining where authority begins, ends, and is mistakenly borrowed.
CBRS-009–011
Memory, Recovery, and Uncertainty
Accounting for retained state, change, failure, and incomplete knowledge.
CBRS-012
Continuous Evaluation
Treating trust as an ongoing decision rather than a permanent condition.