Skip to content
PostMTA Hosted
StatusSign inOpen panelRequest access

Trust

PMH-SEC control matrix

PMH-SEC controls map to live tests in theproof matrix and compliancecrosswalk.

IDControlStatus
PMH-SEC-001CORS allowlist (no open *)Live
PMH-SEC-002Bearer JWT for panel routesLive
PMH-SEC-003Workspace membership checksLive
PMH-SEC-004Viewer role blocked from mutationsLive
PMH-SEC-005Editor+ for send and credentialsLive
PMH-SEC-006Optional AAL2 / MFA gateShipping
PMH-SEC-007Rate limits on send endpointsLive
PMH-SEC-008API keys — secrets never returnedLive
PMH-SEC-009SMTP passwords hashed at restLive
PMH-SEC-010Safe credential views (no hashes)Live
PMH-SEC-011Revoked SELECT on credential tablesLive
PMH-SEC-012Append-only audit_eventsLive
PMH-SEC-013Audit on send, keys, grantsLive
PMH-SEC-014Dev seed gated (ALLOW_DEV_SEED)Live
PMH-SEC-018SMTP STARTTLS when certs setLive
PMH-SEC-022No service_role in browser bundleLive
PMH-SEC-023DKIM secrets service_role onlyLive
PMH-SEC-025Prod refuses lab flagsLive
PMH-SEC-027DNS checklist scrubs private keysLive
PMH-SEC-015Kumo metrics lab bypass gatedLive
PMH-SEC-016Bootstrap balance 0Live
PMH-SEC-017Credit grant admin/owner onlyLive
PMH-SEC-019Production SMTP TLS requiredLive
PMH-SEC-020Production SMTP cert (ACME) renewalLive (matrix M58)
PMH-SEC-024DKIM keys scoped per workspace (RLS)Live
PMH-SEC-026Verified From required in productionLive
PMH-SEC-028Shaping / warmup ladders (Kumo-native)Live (matrix M53d)
PMH-SEC-029Suppress lists honored on send + SMTPLive (matrix M55/M56)
PMH-SEC-030Observability pack (Prom + Alertmanager + Grafana)Live (matrix M57)
PMH-SEC-031Signed backup (GPG detached)Live (matrix M53b/M66)
PMH-SEC-032Air-gap signed offline update bundleLive (matrix M61)
PMH-SEC-033Delivery webhooks (HMAC + idempotency)Live (matrix M60)
PMH-SEC-034Reputation pulse (on-box aggregation)Live (matrix M62)
PMH-SEC-035OIDC + SAML + MFA + AAL2 (panel identity)Live (matrix M59)
PMH-SEC-036Multi-tenant isolation test (cross-workspace reject)Live (matrix M62)
PMH-SEC-037Migration roundtrip (forward + every down + forward)Live (matrix M64)
PMH-SEC-038Chaos failure-injection (API/Supabase/SMTP)Live (matrix M65)
PMH-SEC-020Editor helper for owner/admin/operatorLive
PMH-SEC-021RLS stubs for domains/ips/jobsLive
PMH-SEC-024CORS denies unknown originsLive
PMH-SEC-026Prod refuses SMTP_ALLOW_INSECURELive
PMH-SEC-029Contact intake rate-limited auditLive

← Trust center