CLEARANCE DECISION LAYER

CL-ENTRY — Scope

• System Architecture Diagram
• Self-Disclosure of fragile points
• Access Proof

CL-FULL — Scope

• Full 25-function evaluation
• Per category (Web3, SaaS, E-commerce) different requirements

Includes QuantumGate (PQC) & Crypto-Specific Audit.

CL-RE — Scope

• Delta Report
• Evidence of Fix

CL-AI-SHIELD — Functions

• VerifySource – Input origin validation
• DetectDrift – Semantic intent check
• RiskTarget – Destination risk scoring
• SanitizeMind – Memory poisoning scan
• AuthIntent – Cryptographic intent proof
• SecureReplay – Replay attack prevention

CL · MiCA Readiness — Scope

Documented snapshot at T0 — informational, not a CASP authorisation.

• Whitepaper — required sections, completeness
• CASP posture — declared activity and disclosure narrative
• AML / KYC — published policy and procedure references
• Market abuse — surveillance and conflict policies
• Governance & disclosure — roles, conflicts, decision-making
• Capital / prudential — flagged where in scope (specialist review)
• Consumer protection — terms, rights, complaints channel

AI assists. A human at AlfaNest Labs locks the verdict before delivery.

CL · ISO 27001 Gap — Scope

First-pass review — not a certification audit.

• ISMS scope and policy coverage check
• Risk register starter (top documented risks)
• Annex A controls — present / partial / missing
• Internal audit and management review references
• Asset and access management posture
• Prioritised remediation list

AI drafts the gap analysis. A human reviews and locks it.

CL · SOC 2 Readiness — Scope

SOC 2-oriented snapshot at T0 — not a Type I/II attestation.

• Trust services criteria coverage map
• Control narrative skeleton
• Evidence checklist — what auditors typically request
• Vendor and access control posture
• Incident response and change management references
• Gap report with prioritised next steps

Designed for SaaS teams whose enterprise buyers ask for SOC 2 evidence.

CL · Full Bundle — Scope

MiCA + ISO 27001 + SOC 2 in one locked report pack.

• All scopes from MiCA Readiness, ISO 27001 Gap and SOC 2 Readiness
• Shared evidence reuse where the same artefacts apply
• Single executive summary across the three lenses
• Cross-framework remediation roadmap with priorities

For teams that want every angle covered in a single engagement.