User Manual
Starting, register/sign-in, local Resident/Site-side/OTP/SSH browsing, trusted prompts, recovery, and erase.
Download PDFDocumentation shelf
Read the behavior, boundary, and evidence.
Printable PDFs for owners and reviewers, plus live Markdown for threat models and protocols. The repository remains authoritative.
Owner manuals (PDF)
Raw Markdown and the complete tree live on GitHub.
Companion Manual
Native companion: Passkeys, SSH, Files, Activity, RTC, Device settings, firmware/recovery, and erase.
Download PDFOpenPGP Manual
What OpenPGP is on csiPass, the companion's pages and the glass with screenshots, setting GnuPG up, a card from empty to working on the command line, SSH, Git signing, and everyday use.
Download PDFPIV Manual
The four PIV slots and their PIN rules, setup and the administration key backup, the companion's pages and the glass with screenshots, the command-line tools, OpenSC administration, Windows logon, and key history.
Download PDFSecurity
Threat model, trust boundaries, and what the companion must never see.
Download PDFConformance
CTAP, OpenPGP Card and PIV coverage clause by clause (U2F is lab-only), and how each item was checked.
Download PDFRoadmap (archive PDF)
Full markdown export. Prefer the live open scale for current status.
Download PDFThreat models & protocols
Best read from tracked source; they move faster than printable PDFs.
Security baseline
Overall threat model and security posture.
Read sourceFIDO threat model
CTAPHID, CTAP 2.1, and lab U2F surfaces.
Read sourcePIN and user verification
UV gate and authenticator PIN policy.
Read sourceCredential lifecycle
Credential kinds, hmac-secret, attestation.
Read sourceManagement protocol
USB management wire, paging, Files, firmware, RTC, Activity.
Read sourceManagement threat model
Authority, sessions, and management-surface threats.
Read sourceAuthority and sessions
Token, session, evaluation order, teardown.
Read sourceExposure ledger
What each management command class exposes and changes.
Read sourceArchitecture
Runtime layers, trust boundaries, storage bands.
Read sourceOpenPGP / PIV design
Joint CCID plan, contracts, commissioning, lifecycle journal, and the evidence register.
Browse folder