CipherShift365 — Platform Overview
CipherShift365 is a post-quantum cryptography (PQC) readiness and migration platform for the .NET and Azure estate, built by 365Architect (www.365architect.com).
It ships as Workbench, a copy-and-run desktop application (MAUI, .NET 10) — no installer, no admin rights, no service, no cloud, and nothing phones home. Workbench fronts four lifecycle modules — Compass (Discover), Vault (Migrate), Guardian (Monitor) — over a Shared Core.
Architecture
Hardware / Environment Requirements
| Requirement | Minimum |
|---|---|
| Operating System | Windows 10+ / Windows Server 2019+ / Linux (x64) |
| .NET SDK | 10.0 (build); 8.0+ (runtime libraries) |
| RAM | 4 GB (8 GB recommended for large estates) |
| Disk | 500 MB (plus KB data) |
| Network | None required — fully air-gap operable |
Authentication Model
CipherShift365 ships as Workbench, a copy-and-run desktop application. There is no application-level authentication — Workbench runs as the operator's own OS principal. Access control is whatever the client already enforces on the engagement machine; nothing is pre-seeded and no token endpoint exists.
Licensing is offline signed files — no licence server, no phone-home, and nothing leaves the air gap. Each engagement is covered by a signed licence file issued by 365 Architect.
Where to Run
| Component | Deployment |
|---|---|
| Workbench | Operator workstation — copy-and-run, no installer, no admin rights |
| Compass CLI | Developer workstation, CI/CD agent |
| Vault SDK | Inside your .NET application (NuGet) |
| Guardian Gate | CI/CD pipeline agent (licensed CI package) |
| Guardian Runtime | Inside your .NET application (NuGet in-process) |
| PDF Generator | Inside the Workbench desktop app |
| Knowledge Base | Signed file, distributed to all hosts |
How to Run Workbench
# Copy the Workbench folder to the engagement machine (self-contained — no install)
# Run the desktop app
cd CipherShift365.Workbench
./CipherShift365.Workbench
# Compass scan is also available from the CLI
cipher-shift scan --project .
Workbench is copy-and-run: copy the folder, run it, and delete the folder at engagement close-out. There is no installer, no admin rights, no service, and nothing runs in the background.
Documentation Topics
Discover more about the platform's high-level strategy, scenarios, and architecture decisions:
- Product Description — Executive overview and problem statement.
- Use Cases — Actors, scenarios, and traceability.
- Architecture Overview — Composition, viewpoints, and component decomposition.
- Architecture Decisions — ADR-001 through ADR-008.
- Quality Attributes — Scenario-by-scenario verification of reliability, safety, and performance.
- Sample Output — An illustrative CBOM showing the risk tiers and finding format a Compass scan produces.
Complete Product Inventory & API Reference
| # | Product | Type | NuGet Package | Documentation |
|---|---|---|---|---|
| 1 | Workbench | Desktop App | CipherShift365.Workbench |
docs/workbench.md |
| 2 | Shared Core | Library | CipherShift365.Core.Runtime |
docs/core-runtime.md |
| 3 | Analysis Engine | Library | CipherShift365.Core.Analysis |
docs/analysis-engine.md |
| 4 | Compass CLI | Global Tool | CipherShift365.Compass |
docs/compass.md |
| 5 | Vault SDK | Library | CipherShift365.Vault |
docs/vault.md |
| 6 | Guardian Gate | Library | CipherShift365.Guardian |
docs/guardian-gate.md |
| 7 | Guardian Runtime | Library | CipherShift365.Guardian |
docs/guardian-runtime.md |
| 8 | Knowledge Base | Data Package | Signed binary | docs/knowledge-base.md |
| 9 | CNSA 2.0 Validator | Library | CipherShift365.Core.Analysis |
docs/cnsa-validator.md |
| 10 | PDF Generator | Library | CipherShift365.Portal.Pdf |
docs/pdf-generator.md |
| 11 | Questionnaire Engine | Library | CipherShift365.Core.Analysis |
docs/questionnaire.md |
| 12 | REST API | Web App — [designed, not shipped] | CipherShift365.Portal.Api |
docs/rest-api.md |
| 13 | Blazor Portal | Web App — [designed, not shipped] | CipherShift365.Portal.Web |
docs/portal.md |
Distribution & License
CipherShift365 ships as Workbench, a copy-and-run desktop application operated by 365 Architect as part of consulting engagements. The Guardian Gate CI/CD package is available as a licensed CI package (see PQC engagement) after a Baseline Audit.
Free Sample Scan: For qualified prospects, 365 Architect will run Compass discovery against a sample of your repository — on your infrastructure, under NDA — and share the resulting Cryptographic Bill of Materials (CBOM). No charge, no obligation, no software changes hands. You keep the data. Request a sample scan →
Full Engagement: The Cryptographic Baseline Audit (4 weeks) covers full-estate CBOM generation, an HNDL risk matrix, and a crypto-agility wrapper blueprint — delivered as a branded report, generated and handed over via NestVault365. Contact www.365architect.com for engagement scope, terms, and pricing.
Third-party library licenses:
- QuestPDF — Community tier (free for <$1M revenue organizations)
- BouncyCastle — MIT license
- Roslyn (Microsoft.CodeAnalysis) — MIT license
- Syncfusion — available as alternative PDF engine (Community license for <$1M revenue)