Operator Self-Test & Production E2E Record
Recorded engineering evidence for ML-DSA-65 verification, HybridRequired policy enforcement, fail-closed behavior and production end-to-end operation.
Release and recorded evidence
Date
2026-09-11 UTCRelease build ID
11 passed · 0 failedProduction E2E
PASSHybrid benchmark
100 / 100 valid requestsFinal E2E harness commit
2026-09-11 UTCRelease build ID
RANNTA-PQ-CLOUD-PHASE2-20260911-01Crypto / policy tests11 passed · 0 failedProduction E2E
PASSHybrid benchmark
100 / 100 valid requestsFinal E2E harness commit
0ddce50395b6b9ffd6e03d4aa882e1fe50d5d4b4Crypto and policy coverage
- Valid and invalid ML-DSA-65 verification.
- HybridRequired verification and replay rejection.
- Key registration, rotation, stale-version rejection and future-version rejection.
- Tenant isolation and malformed-request fail-closed behavior.
- Unsupported policy-mode fail-closed behavior.
- API authentication and policy-bound hybrid verification endpoint behavior.
Production end-to-end cases
TypeScript SDK build
PASSCustomer-side ML-DSA-65 valid
PASSLocal one-byte mutation
Rejected · PASSPublic-key registration
PASSHybridRequired policy
PASSProduction valid request
PASSReplay
Rejected · PASSProduction one-byte mutation
Rejected · PASSclassical_verified=false
Rejected · PASSUsage metering
PASSHybrid audit logging
PASSQA session closed
PASS
PASSCustomer-side ML-DSA-65 valid
PASSLocal one-byte mutation
Rejected · PASSPublic-key registration
PASSHybridRequired policy
PASSProduction valid request
PASSReplay
Rejected · PASSProduction one-byte mutation
Rejected · PASSclassical_verified=false
Rejected · PASSUsage metering
PASSHybrid audit logging
PASSQA session closed
PASS
Production /v1/hybrid/verify latency
Samples
100 / 100 validAverage
663.34 msp50
619.28 msp95
777.14 msp99
1067.85 msMethod
Sequential HTTPS · operator client
100 / 100 validAverage
663.34 msp50
619.28 msp95
777.14 msp99
1067.85 msMethod
Sequential HTTPS · operator client
Each benchmark request used a unique signed canonical payload. The production hostname was pinned to the production server with curl --resolve.
Test runtime and key sizes
Rust
1.98.1OpenSSL
3.5.7ML-DSA-65 public key
1952 bytesML-DSA-65 signature
3309 bytesPQ private key sent to RANNTA
NOProduction service restart for test
NO
1.98.1OpenSSL
3.5.7ML-DSA-65 public key
1952 bytesML-DSA-65 signature
3309 bytesPQ private key sent to RANNTA
NOProduction service restart for test
NO
Public health sample
Requests
100 / 100Average
639.12 msp50
614.96 msp95
757.43 msp99
1202.69 ms
100 / 100Average
639.12 msp50
614.96 msp95
757.43 msp99
1202.69 ms