Protection starts onboard.

Lightship’s Windows pilot uses named accounts, role separation, local session controls, tamper-evident entry seals, chained audit records and protected backup files.

Local data protection

Integrity and backup material is protected with Windows user-profile security. Local service access is restricted and guarded by origin, authorization, size and rate controls.

Record integrity

Entries are sealed with HMAC-SHA-256. Approval and amendment actions remain attributable, and approved entries are preserved rather than silently overwritten.

Responsible disclosure

A formal security contact and disclosure policy will be published before general availability. Do not place sensitive vulnerability details in a public channel.

Current status

The RC1 pilot has passed internal security and load tests, but independent penetration testing, code signing and external regulatory assessment remain release gates.