CipherShift365 Workbench
Component: CipherShift365.Workbench
Framework: .NET MAUI (.NET 10)
Role: The CipherShift365 desktop application — the product surface delivered as part of every 365 Architect engagement.
Table of Contents
What It Does
Workbench is the shipped user interface for the CipherShift365 platform. It is a copy-and-run desktop application: copy the folder to the engagement machine, run it, and delete the folder at engagement close-out. There is no installer, no admin rights required, no service, and nothing runs in the background.
It calls the engine libraries (Core.Runtime, Core.Analysis, Guardian, Portal.Pdf) directly, in-process — there is no separate server, no REST API, and no application-level authentication. The app runs under the operator's own OS account.
Key features:
- Compass scans — run PQC discovery against a .NET/Azure repository and review the CBOM.
- Dashboard — risk scores, finding counts, and tiered finding cards (
badge-unknown,.score-card.unkn, etc.). - Guardian drift views — compare scans over time to confirm remediation stays in place.
- Questionnaire — the PQC Readiness Assessment with transparent scoring.
- Branded PDF — offline report rendering via
CipherShift365.Portal.Pdf. - License page — the app's own licensing UI for offline signed licence files.
Why It's Needed (Value Proposition)
| Need | How Workbench addresses it |
|---|---|
| Air-gapped delivery | Fully offline — no cloud, no telemetry, nothing phones home. |
| Zero-trust client infrastructure | Copy-and-run, no admin rights, no installation footprint. |
| Engagement close-out | Delete the folder. Nothing persists on the client machine. |
| Consultant-led delivery | Runs on the consultant's laptop under NDA; the client never has to install, host, or administer software. |
How to Run / Use
# Copy the Workbench folder to the engagement machine (self-contained — no install)
# Run the desktop app
cd CipherShift365.Workbench
./CipherShift365.Workbench
No setup, no configuration beyond the signed licence file. The app reads the licence on its License page and enforces it locally.
Licensing
Workbench licensing is offline signed files — no licence server, no phone-home, no telemetry. A signed licence file is issued by 365 Architect for each engagement. The recurring Cryptographic Assurance License (see PQC engagement) protects the Guardian CI package in the client's pipeline; it does not include the Workbench desktop app, which ships with the consulting engagement itself.
What It Replaces
Workbench replaced the earlier Blazor Portal + REST API tier. Those components are designed, not shipped — their documentation is retained as engineering reference: