Prove

Evidence Centre

Evidence over assertion. Every artefact traces Requirement → Control → Test → Result → Evidence.

PKI / Dual Trust

Evidence coverage81%

Assessed controls with at least one evidence artefact · target 95% for cutover

Artefacts131

Approved94

Awaiting approval37

TPP Continuity Evidence

Each record links a TPP, organisation ID, client ID, system, control, test, environment and result. No credentials or client secrets are stored.

516 recordsOpen TPP Assurance

ID	TPP	Organisation ID	Control	Test	Result	Source	Env	Timestamp
TEV-5000	FinConnect Ltd	ORG-001000	TPP-DIR-001	Organisation resolved in new Directory	PASS	Directory API response metadata	Production	16 Sept, 06:10
TEV-5001	FinConnect Ltd	ORG-001000	TPP-CERT-001	Presented certificate valid	PASS	Certificate validation record	Production	16 Sept, 06:10
TEV-5002	FinConnect Ltd	ORG-001000	TPP-ROLE-002	Permissions correctly resolved	PASS	Role comparison report	Production	16 Sept, 06:10
TEV-5003	Northwind Money	ORG-001005	TPP-REG-002	Existing Client ID recognised	PASS	IAM client metadata response	Production	16 Sept, 07:11
TEV-5004	Northwind Money	ORG-001005	TPP-SSA-001	SSA signature validates	PASS	SSA validation report	Production	16 Sept, 07:11
TEV-5005	Northwind Money	ORG-001005	TPP-E2E-004	Open Banking API access succeeds	PASS	API connectivity test result	Production	16 Sept, 07:11
TEV-5006	Cadence Financial	ORG-001010	TPP-CERT-001	Presented certificate valid	PASS	Certificate validation record	Production	16 Sept, 08:12
TEV-5007	Cadence Financial	ORG-001010	TPP-ROLE-002	Permissions correctly resolved	PASS	Role comparison report	Production	16 Sept, 08:12
TEV-5008	Cadence Financial	ORG-001010	TPP-DIR-001	Organisation resolved in new Directory	PASS	Directory API response metadata	Production	16 Sept, 08:12
TEV-5009	Everbright PLC	ORG-001015	TPP-SSA-001	SSA signature validates	PASS	SSA validation report	Production	16 Sept, 09:13
TEV-5010	Everbright PLC	ORG-001015	TPP-E2E-004	Open Banking API access succeeds	PASS	API connectivity test result	Production	16 Sept, 09:13
TEV-5011	Everbright PLC	ORG-001015	TPP-REG-002	Existing Client ID recognised	PASS	IAM client metadata response	Production	16 Sept, 09:13

131 of 131

				System	Env		By
EVD-2000	API test	Connecting to Directory API — PASS	DIR-001	Outbound Proxy	Production	11 Sept, 09:00	assurance-engine	Approved
EVD-2001	API test	Directory API v2.2 organisation schema — WARNING	DIR-002	TPP Registration Service	Production	12 Sept, 10:07	assurance-engine	Pending
EVD-2002	OAuth test	Obtaining OAuth token — PASS	OAUTH-001	Jans IAM	Production	11 Sept, 11:14	assurance-engine	Approved
EVD-2003	OAuth test	Validating OAuth audience — FAIL	OAUTH-002	Jans IAM	Production	12 Sept, 12:21	assurance-engine	Pending
EVD-2004	API test	Retrieving TPP organisation — PASS	TPP-001	TPP Registration Service	Production	11 Sept, 13:28	assurance-engine	Approved
EVD-2005	SSA validation	Validating SSA — PASS	SSA-001	TPP Registration Service	Production	12 Sept, 14:35	assurance-engine	Approved
EVD-2006	Certificate validation	Validating Keyfactor certificate — PASS	PKI-001	Open Banking API Gateway	Production	11 Sept, 15:42	assurance-engine	Approved
EVD-2007	Certificate validation	Validating Entrust certificate — PASS	PKI-002	Open Banking API Gateway	Production	12 Sept, 16:49	assurance-engine	Approved
EVD-2008	Trust-store evidence	Testing dual trust — PASS	PKI-002	Open Banking API Gateway	Production	11 Sept, 09:56	assurance-engine	Approved
EVD-2009	Network test	Checking OCSP — PASS	REV-001	Certificate Validation Service	Production	12 Sept, 10:03	assurance-engine	Approved
EVD-2010	Network test	Checking CRL — WARNING	REV-002	Certificate Validation Service	Production	11 Sept, 11:10	assurance-engine	Pending
EVD-2011	API test	Testing invalid certificate rejection — PASS	TPP-003	Open Banking API Gateway	Production	12 Sept, 12:17	assurance-engine	Approved
EVD-2012	API test	Testing unknown TPP — PASS	TPP-001	TPP Registration Service	Production	11 Sept, 13:24	assurance-engine	Approved
EVD-2013	API test	End-to-end TPP journey (AISP) — WARNING	TPP-002	Open Banking API Gateway	Production	12 Sept, 14:31	assurance-engine	Pending
EVD-2015	API test	TPP role validation against Directory — FAIL	TPP-002	TPP Registration Service	Production	12 Sept, 16:45	assurance-engine	Pending
EVD-2016	API test	Revoked TPP certificate rejected — PASS	TPP-003	Open Banking API Gateway	Production	11 Sept, 09:52	assurance-engine	Approved
EVD-2017	JWKS test	JWKS content-type negotiation — FAIL	JWKS-001	Jans IAM	Production	12 Sept, 10:59	assurance-engine	Pending
EVD-2018	JWKS test	Key rollover with kid — FAIL	JWKS-002	Jans IAM	Production	11 Sept, 11:06	assurance-engine	Pending
EVD-2019	Certificate validation	4096-bit issuing CA handshake — PASS	PKI-004	F5 Load Balancer	Production	12 Sept, 12:13	assurance-engine	Approved
EVD-2021	Certificate validation	Keyfactor chain on NGINX — FAIL	PKI-001	NGINX Reverse Proxy	Production	12 Sept, 14:27	assurance-engine	Pending
EVD-2022	Certificate validation	Keyfactor chain on Payment API — FAIL	PKI-001	Payment API	Production	11 Sept, 15:34	assurance-engine	Pending
EVD-2023	API test	DCR with Keyfactor transport certificate — FAIL	PKI-001	TPP Registration Service	Production	12 Sept, 16:41	assurance-engine	Pending
EVD-2024	SSA validation	Expired SSA rejected — PASS	SSA-001	TPP Registration Service	Production	11 Sept, 09:48	assurance-engine	Approved
EVD-2025	Certificate validation	Entrust chain on TPP Registration — PASS	PKI-002	TPP Registration Service	Production	12 Sept, 10:55	assurance-engine	Approved
EVD-2026	API test	OCSP responder unreachable (soft-fail policy) — WARNING	REV-001	Certificate Validation Service	Production	11 Sept, 11:02	assurance-engine	Pending
EVD-2027	API test	Directory connectivity from Sandbox — PASS	DIR-001	Sandbox Reverse Proxy	Sandbox	12 Sept, 12:09	assurance-engine	Approved
EVD-3000	Configuration snapshot	Certificate path building validated — configuration snapshot	PKI-005	Certificate Validation Service	Sandbox	10 Sept, 05:20	assurance-engine	Pending
EVD-3001	Trust-store evidence	Directory API TLS 1.2+ enforced — trust-store evidence	DIR-003	Jans IAM	Production	09 Sept, 11:05	R. Okafor	Approved
EVD-3002	Engineer attestation	Directory rate-limit handling — engineer attestation	DIR-004	TPP Registration Service	Production	10 Sept, 12:05	A. Whitfield	Approved
EVD-3003	Architecture review	Directory pagination supported — architecture review	DIR-006	F5 Load Balancer	Production	12 Sept, 14:05	S. Patel	Approved
EVD-3004	Screenshot	Directory API retry policy — screenshot	DIR-007	NGINX Reverse Proxy	Production	08 Sept, 15:05	L. Mensah	Pending
EVD-3005	Network test	Directory health probe configured — network test	DIR-008	Outbound Proxy	Sandbox	09 Sept, 16:05	assurance-engine	Approved
EVD-3006	Configuration snapshot	Directory API timeout tuned — configuration snapshot	DIR-009	Enterprise Trust Store	Production	10 Sept, 17:05	R. Okafor	Approved
EVD-3007	Trust-store evidence	Directory API logging redacted — trust-store evidence	DIR-010	Payment API	Production	11 Sept, 18:05	A. Whitfield	Approved
EVD-3008	Engineer attestation	Client credentials flow uses private_key_jwt — engineer attestation	OAUTH-004	Account Information API	Production	12 Sept, 10:05	S. Patel	Pending
EVD-3009	Architecture review	Refresh of Directory tokens automated — architecture review	OAUTH-007	Open Banking Monitoring	Production	10 Sept, 13:05	L. Mensah	Approved
EVD-3010	Screenshot	OAuth error mapping — screenshot	OAUTH-008	HSM	Sandbox	11 Sept, 14:05	assurance-engine	Approved
EVD-3011	Network test	Clock skew tolerance configured — network test	OAUTH-009	Open Banking API Gateway	Production	12 Sept, 15:05	R. Okafor	Approved
EVD-3012	Configuration snapshot	Token introspection migrated — configuration snapshot	OAUTH-010	Jans IAM	Production	08 Sept, 16:05	A. Whitfield	Pending
EVD-3013	Trust-store evidence	OAuth logging redacted — trust-store evidence	OAUTH-011	TPP Registration Service	Production	09 Sept, 17:05	S. Patel	Approved
EVD-3014	Engineer attestation	DCR request schema v3.3 — engineer attestation	TPP-004	Certificate Validation Service	Production	10 Sept, 18:05	L. Mensah	Approved
EVD-3015	Architecture review	Redirect URI validation — architecture review	TPP-007	Outbound Proxy	Sandbox	08 Sept, 12:05	assurance-engine	Approved
EVD-3016	Screenshot	Registration audit trail — screenshot	TPP-008	Enterprise Trust Store	Production	09 Sept, 13:05	R. Okafor	Pending
EVD-3017	Network test	Legacy DCR adapter decommission plan — network test	TPP-009	Payment API	Production	10 Sept, 14:05	A. Whitfield	Approved
EVD-3018	Configuration snapshot	Duplicate client detection — configuration snapshot	TPP-010	Account Information API	Production	11 Sept, 15:05	S. Patel	Approved
EVD-3019	Trust-store evidence	Registration rate limiting — trust-store evidence	TPP-011	Consent Service	Production	12 Sept, 16:05	L. Mensah	Approved
EVD-3020	Engineer attestation	SSA expiry enforced — engineer attestation	SSA-002	Developer Portal	Sandbox	08 Sept, 17:05	assurance-engine	Pending
EVD-3021	Architecture review	SSA software roles mapped — architecture review	SSA-004	HSM	Production	10 Sept, 10:05	R. Okafor	Approved
EVD-3022	Screenshot	SSA org_jwks_endpoint honoured — screenshot	SSA-005	Open Banking API Gateway	Production	11 Sept, 11:05	A. Whitfield	Approved
EVD-3023	Network test	SSA revocation checked — network test	SSA-006	Jans IAM	Production	12 Sept, 12:05	S. Patel	Approved
EVD-3024	Configuration snapshot	SSA schema validation — configuration snapshot	SSA-007	TPP Registration Service	Production	08 Sept, 13:05	L. Mensah	Pending
EVD-3025	Trust-store evidence	SSA claims logged — trust-store evidence	SSA-008	Certificate Validation Service	Sandbox	09 Sept, 14:05	assurance-engine	Approved
EVD-3026	Engineer attestation	JWKS cache refresh on rotation — engineer attestation	JWKS-003	F5 Load Balancer	Production	10 Sept, 15:05	R. Okafor	Approved
EVD-3027	Architecture review	JWKS size limits — architecture review	JWKS-006	Enterprise Trust Store	Production	08 Sept, 18:05	A. Whitfield	Approved
EVD-3028	Screenshot	JWKS negative caching — screenshot	JWKS-007	Payment API	Production	09 Sept, 10:05	S. Patel	Pending
EVD-3029	Network test	JWKS x5c chain validated — network test	JWKS-009	Consent Service	Production	11 Sept, 12:05	L. Mensah	Approved
EVD-3030	Configuration snapshot	Certificate expiry monitoring — configuration snapshot	CERT-001	Developer Portal	Sandbox	12 Sept, 13:05	assurance-engine	Approved
EVD-3031	Trust-store evidence	SAN/CN policy enforced — trust-store evidence	CERT-002	Open Banking Monitoring	Production	08 Sept, 14:05	R. Okafor	Approved
EVD-3032	Engineer attestation	EKU validation — engineer attestation	CERT-003	HSM	Production	09 Sept, 15:05	A. Whitfield	Pending
EVD-3033	Architecture review	QWAC/QSealC distinction — architecture review	CERT-005	Jans IAM	Production	11 Sept, 17:05	S. Patel	Approved
EVD-3034	Screenshot	Certificate pinning removed — screenshot	CERT-006	TPP Registration Service	Production	12 Sept, 18:05	L. Mensah	Approved
EVD-3035	Network test	Key usage validated — network test	CERT-007	Certificate Validation Service	Sandbox	08 Sept, 10:05	assurance-engine	Approved
EVD-3036	Configuration snapshot	Certificate renewal runbook — configuration snapshot	CERT-008	F5 Load Balancer	Production	09 Sept, 11:05	R. Okafor	Pending
EVD-3037	Trust-store evidence	Signing certificate rotation tested — trust-store evidence	CERT-009	NGINX Reverse Proxy	Production	10 Sept, 12:05	A. Whitfield	Approved
EVD-3038	Engineer attestation	Certificate CN policy for sandbox — engineer attestation	CERT-011	Enterprise Trust Store	Production	12 Sept, 14:05	S. Patel	Approved
EVD-3039	Architecture review	Certificate issuance SLA — architecture review	CERT-013	Account Information API	Production	09 Sept, 16:05	L. Mensah	Approved
EVD-3040	Screenshot	Keyfactor root distributed — screenshot	PKI-006	Consent Service	Sandbox	10 Sept, 17:05	assurance-engine	Pending
EVD-3041	Network test	Cross-certificate handled — network test	PKI-007	Developer Portal	Production	11 Sept, 18:05	R. Okafor	Approved
EVD-3042	Configuration snapshot	Policy OID validation — configuration snapshot	PKI-008	Open Banking Monitoring	Production	12 Sept, 10:05	A. Whitfield	Approved
EVD-3043	Trust-store evidence	Chain depth limits — trust-store evidence	PKI-009	HSM	Production	08 Sept, 11:05	S. Patel	Approved
EVD-3044	Engineer attestation	PKI change management — engineer attestation	PKI-010	Open Banking API Gateway	Production	09 Sept, 12:05	L. Mensah	Pending
EVD-3045	Architecture review	PKI monitoring alerts — architecture review	PKI-013	Certificate Validation Service	Sandbox	12 Sept, 15:05	assurance-engine	Approved
EVD-3046	Screenshot	Trust store inventory complete — screenshot	TS-001	F5 Load Balancer	Production	08 Sept, 16:05	R. Okafor	Approved
EVD-3047	Network test	Trust store version control — network test	TS-002	NGINX Reverse Proxy	Production	09 Sept, 17:05	A. Whitfield	Approved
EVD-3048	Configuration snapshot	Trust store distribution automated — configuration snapshot	TS-003	Outbound Proxy	Production	10 Sept, 18:05	S. Patel	Pending
EVD-3049	Trust-store evidence	No expired anchors present — trust-store evidence	TS-005	Payment API	Production	12 Sept, 11:05	L. Mensah	Approved
EVD-3050	Engineer attestation	Trust store access controlled — engineer attestation	TS-006	Account Information API	Sandbox	08 Sept, 12:05	assurance-engine	Approved
EVD-3051	Architecture review	Sandbox trust store aligned — architecture review	TS-008	Developer Portal	Production	10 Sept, 14:05	R. Okafor	Approved
EVD-3052	Screenshot	Trust store change alerting — screenshot	TS-009	Open Banking Monitoring	Production	11 Sept, 15:05	A. Whitfield	Pending
EVD-3053	Network test	Trust store owner assigned — network test	TS-010	HSM	Production	12 Sept, 16:05	S. Patel	Approved
EVD-3054	Configuration snapshot	Trust store backup verified — configuration snapshot	TS-011	Open Banking API Gateway	Production	08 Sept, 17:05	L. Mensah	Approved
EVD-3055	Trust-store evidence	Legacy anchors removal plan — trust-store evidence	TS-012	Jans IAM	Sandbox	09 Sept, 18:05	assurance-engine	Approved
EVD-3056	Engineer attestation	Revocation failure policy defined — engineer attestation	CV-001	TPP Registration Service	Production	10 Sept, 10:05	R. Okafor	Pending
EVD-3057	Architecture review	Validation latency SLO — architecture review	CV-003	F5 Load Balancer	Production	12 Sept, 12:05	A. Whitfield	Approved
EVD-3058	Screenshot	Validation cache TTL — screenshot	CV-004	NGINX Reverse Proxy	Production	08 Sept, 13:05	S. Patel	Approved
EVD-3059	Network test	Name constraints handled — network test	CV-005	Outbound Proxy	Production	09 Sept, 14:05	L. Mensah	Approved
EVD-3060	Configuration snapshot	Validation service HA — configuration snapshot	CV-007	Payment API	Sandbox	11 Sept, 16:05	assurance-engine	Pending
EVD-3061	Trust-store evidence	Egress allow-list updated — trust-store evidence	NET-001	Account Information API	Production	12 Sept, 17:05	R. Okafor	Approved
EVD-3062	Engineer attestation	DNS resolution for new endpoints — engineer attestation	NET-002	Consent Service	Production	08 Sept, 18:05	A. Whitfield	Approved
EVD-3063	Architecture review	Firewall rules for CRL — architecture review	NET-004	Open Banking Monitoring	Production	10 Sept, 11:05	S. Patel	Approved
EVD-3064	Screenshot	Proxy authentication configured — screenshot	NET-005	HSM	Production	11 Sept, 12:05	L. Mensah	Pending
EVD-3065	Network test	Network latency baseline — network test	NET-006	Open Banking API Gateway	Sandbox	12 Sept, 13:05	assurance-engine	Approved
EVD-3066	Configuration snapshot	TLS inspection bypass — configuration snapshot	NET-007	Jans IAM	Production	08 Sept, 14:05	R. Okafor	Approved
EVD-3067	Trust-store evidence	Sandbox connectivity validated — trust-store evidence	NET-008	TPP Registration Service	Production	09 Sept, 15:05	A. Whitfield	Approved
EVD-3068	Engineer attestation	Failover path validated — engineer attestation	NET-009	Certificate Validation Service	Production	10 Sept, 16:05	S. Patel	Pending
EVD-3069	Architecture review	Gateway client cert forwarding — architecture review	GW-001	Outbound Proxy	Production	08 Sept, 10:05	L. Mensah	Approved
EVD-3070	Screenshot	Gateway header sanitisation — screenshot	GW-002	Enterprise Trust Store	Sandbox	09 Sept, 11:05	assurance-engine	Approved
EVD-3071	Network test	Gateway policy versioning — network test	GW-003	Payment API	Production	10 Sept, 12:05	R. Okafor	Approved
EVD-3072	Configuration snapshot	Gateway certificate cache — configuration snapshot	GW-004	Account Information API	Production	11 Sept, 13:05	A. Whitfield	Pending
EVD-3073	Trust-store evidence	Gateway error responses — trust-store evidence	GW-005	Consent Service	Production	12 Sept, 14:05	S. Patel	Approved
EVD-3074	Engineer attestation	Gateway rate limits — engineer attestation	GW-006	Developer Portal	Production	08 Sept, 15:05	L. Mensah	Approved
EVD-3075	Architecture review	Gateway rollback tested — architecture review	GW-008	HSM	Sandbox	10 Sept, 17:05	assurance-engine	Approved
EVD-3076	Screenshot	Client store migration — screenshot	IAM-001	Open Banking API Gateway	Production	11 Sept, 18:05	R. Okafor	Pending
EVD-3077	Network test	IAM HA validated — network test	IAM-002	Jans IAM	Production	12 Sept, 10:05	A. Whitfield	Approved
EVD-3078	Configuration snapshot	IAM config as code — configuration snapshot	IAM-003	TPP Registration Service	Production	08 Sept, 11:05	S. Patel	Approved
EVD-3079	Trust-store evidence	IAM secrets rotated — trust-store evidence	IAM-004	Certificate Validation Service	Production	09 Sept, 12:05	L. Mensah	Approved
EVD-3080	Engineer attestation	IAM audit logging — engineer attestation	IAM-005	F5 Load Balancer	Sandbox	10 Sept, 13:05	assurance-engine	Pending
EVD-3081	Architecture review	IAM Sandbox parity — architecture review	IAM-008	Enterprise Trust Store	Production	08 Sept, 16:05	R. Okafor	Approved
EVD-3082	Screenshot	IAM client migration dry-run — screenshot	IAM-009	Payment API	Production	09 Sept, 17:05	A. Whitfield	Approved
EVD-3083	Network test	IAM certificate bound tokens — network test	IAM-010	Account Information API	Production	10 Sept, 18:05	S. Patel	Approved
EVD-3084	Configuration snapshot	OCSP stapling enabled — configuration snapshot	REV-003	Consent Service	Production	11 Sept, 10:05	L. Mensah	Pending
EVD-3085	Trust-store evidence	OCSP response caching — trust-store evidence	REV-004	Developer Portal	Sandbox	12 Sept, 11:05	assurance-engine	Approved
EVD-3086	Engineer attestation	CRL size handling — engineer attestation	REV-005	Open Banking Monitoring	Production	08 Sept, 12:05	R. Okafor	Approved
EVD-3087	Architecture review	Revocation monitoring — architecture review	REV-007	Open Banking API Gateway	Production	10 Sept, 14:05	A. Whitfield	Approved
EVD-3088	Screenshot	Revocation soft-fail alerting — screenshot	REV-008	Jans IAM	Production	11 Sept, 15:05	S. Patel	Pending
EVD-3089	Network test	Runbooks updated — network test	OPS-001	TPP Registration Service	Production	12 Sept, 16:05	L. Mensah	Approved
EVD-3090	Configuration snapshot	Monitoring dashboards updated — configuration snapshot	OPS-003	F5 Load Balancer	Sandbox	09 Sept, 18:05	assurance-engine	Approved
EVD-3091	Trust-store evidence	Alerting thresholds tuned — trust-store evidence	OPS-004	NGINX Reverse Proxy	Production	10 Sept, 10:05	R. Okafor	Approved
EVD-3092	Engineer attestation	Rollback plan approved — engineer attestation	OPS-005	Outbound Proxy	Production	11 Sept, 11:05	A. Whitfield	Pending
EVD-3093	Architecture review	Incident bridge tested — architecture review	OPS-007	Payment API	Production	08 Sept, 13:05	S. Patel	Approved
EVD-3094	Screenshot	Post-cutover hypercare defined — screenshot	OPS-008	Account Information API	Production	09 Sept, 14:05	L. Mensah	Approved
EVD-3095	Network test	Change freeze scheduled — network test	OPS-010	Developer Portal	Sandbox	11 Sept, 16:05	assurance-engine	Approved
EVD-3096	Configuration snapshot	Capacity validated — configuration snapshot	OPS-011	Open Banking Monitoring	Production	12 Sept, 17:05	R. Okafor	Pending
EVD-3097	Trust-store evidence	Disaster recovery reviewed — trust-store evidence	OPS-012	HSM	Production	08 Sept, 18:05	A. Whitfield	Approved
EVD-3098	Engineer attestation	Data retention reviewed — engineer attestation	OPS-013	Open Banking API Gateway	Production	09 Sept, 10:05	S. Patel	Approved
EVD-3099	Architecture review	Cutover rehearsal completed — architecture review	OPS-015	TPP Registration Service	Production	11 Sept, 12:05	L. Mensah	Approved
EVD-3100	Screenshot	Evidence pack reviewed — screenshot	OPS-016	Certificate Validation Service	Sandbox	12 Sept, 13:05	assurance-engine	Pending
EVD-3101	Network test	Go/No-Go criteria agreed — network test	OPS-017	F5 Load Balancer	Production	08 Sept, 14:05	R. Okafor	Approved
EVD-4001	Configuration snapshot	application-prod.yml (TPP Registration Service)	DIR-001	TPP Registration Service	Production	12 Sept, 08:41	assurance-engine	Approved
EVD-4002	Configuration snapshot	jans-auth-server.properties	OAUTH-002	Jans IAM	Production	13 Sept, 06:10	assurance-engine	Approved
EVD-4003	Trust-store evidence	truststore-inventory-2026-09-12.json	PKI-001	TPP Registration Service	Production	12 Sept, 09:00	A. Whitfield	Approved