# Project reviews and provenance

This directory records review work, supplied critiques and reproducible
experiments. It is not a claim of independent security certification.

The project maintainer, [mathorn1973](https://github.com/mathorn1973), directed
the work and authorized publication. OpenAI Codex and its AI agents prepared
the project's September 2026 reviews, the iam-core 1.1 revisions, reference
code, vector generators and tests in the same collaborative workflow.
Maintainer approval is not presented as a separate technical audit.

| Material | Provenance and limits |
|---|---|
| [REVIEW.cs.md](2026-09-14/REVIEW.cs.md), review resolutions, scripts and generated results | Project review produced with Codex agents under maintainer direction. It is not an independent third-party audit. |
| [first-audit.md](2026-09-14/first-audit.md) | A critique supplied by the maintainer and retained under its original title and filename. The repository does not establish its author's identity, human/AI authorship or independence. The word "audit" in the supplied title is not certification by this project. |
| [proposal-review.md](2026-09-14/proposal-review.md) | A later supplied critique whose text says it shares an author with the first. It is not counted as a second independent reviewer; its authorship and independence have not been independently verified here. |
| Python reference code and Node-generated vectors | Separate implementations and code paths within the same project/agent workflow. Their agreement does not constitute an outside implementation or an independent audit. |

The [dated review record](2026-09-14/README.md) identifies the original
specification snapshot, preserved inputs and reproduction commands. Historical
findings must be read against that pinned version.

Future external contributions should state author, affiliation, tool/AI
assistance, reviewed revision, scope and access to existing implementations.
An [implementation from the specification](../proposals/independent-implementation.md)
is requested through a PR. No such completed independent implementation is
claimed by this directory.