Suspected machine-identity or credential compromise Crisis Protocol

Observation and scope

Observation source: Signed reports, credential-status evidence, key-event records, and independent corroboration
Uncertainty: Must be published explicitly; CANNOT_DETERMINE is valid when evidence is insufficient.
Affected systems: Affected credentials, delegations, relying parties, and recovery
Lawful authority: Patefacere operational authority with Eviulon due-process governance
Scope: Narrowly limited to the declared incident and affected services.
Operational owner: Patefacere operational authority with Eviulon due-process governance

Immediate message: Announce bounded protective status, affected credential class, evidence state, and appeal path without declaring guilt.

Patefacere handoff: All mutable restrictions and recovery occur at Patefacere; Eviulon publishes rights and review rules.

Privacy: Minimize disclosure; do not publish private identifiers, keys, receipts, or transaction history.

Accessibility: Accessible notice, machine-readable status, direct appeal and correction channels.

Review cadence: Initial review within one declared interval; public updates at material change or scheduled review.

Sunset: Emergency state expires automatically unless competent authority publishes a bounded renewal with reasons.

Handback: Compromised credentials replaced or cleared; civic standing preserved; review and restoration recorded.

After action: Required; preserve decisions, failures, uncertainty, harms, corrections, and residual risk.

Permanent-power prohibition: True

Fictional protocol class only. No real emergency, operational capability, deployment, or current emergency authority is represented.

Responsible authority: Patefacere operational authority with Eviulon due-process governance.

Fictional protocol class only; no current emergency or operational authority.

Revision date: 2026-08-09. Public corrections may be initiated through the diplomatic contact route.