Marketing site
Operationalcarvetrace.com — product, pricing, demo, docs, legal.
your-browser latency —
Status
Public surface status
CarveTrace's commercial software is self-hosted on every customer's own infrastructure ; there is no shared runtime for us to monitor on your behalf. This page tracks the public surface we operate — the marketing site, the independent verifier, the open-source mirrors, and the sample bundles.
Operator-curated. Every change to the state below ships as a code change and re-deploys this page within ~5 minutes. Last updated : 2026-06-17.
Public surface
Independent verifier
Operationalverify.carvetrace.com — WASM verifier any auditor uses without a CarveTrace account.
Sample evidence bundle
Operationalverify.carvetrace.com/sample-evidence-bundle.zip
The valid + tampered AI Act recruitment bundles linked from /demo and the verifier.
Documentation
OperationalThe /docs index + the canonical Markdown sources on GitHub.
your-browser latency —
Product surface
Source mirror (GitHub)
Operationalgithub.com/aryamind-tech — open-source verifier components + commercial release artifacts.
What we do NOT monitor here
- Your CarveTrace deployment. Self-hosted on your infrastructure ; you monitor it under your own runbooks. Customer-side monitoring guidance ships in the Onboarding runbook.
- Cloudflare's edge. Our hosting provider's own status is at cloudflarestatus.com. If both our surface and theirs are down, the upstream is theirs.
- RFC 3161 TSA providers + Bitcoin OpenTimestamps calendars. Customer-configured per deployment. Health-check guidance is in tsa-anchoring-guide.md.
Incident communication
If we detect an incident on the public surface we update the state above within 30 minutes and post a corresponding entry in the ChangeLog section below. For customers with an active commercial agreement we additionally email the technical contact on the Order Form within 60 minutes. Severity-1 + severity-2 incidents trigger both ; severity-3 (e.g. a documentation broken-link) is logged below without a customer-side email.
Detail on the severity ladder is on the Security page. Severity-1 = total public-surface outage > 15 min. Severity-2 = degraded verifier UX > 1 h. Severity-3 = a public-facing defect with no functional impact (broken link, stale dep advisory).
ChangeLog — last 30 days
We publish material changes to the public surface here. Routine content updates (blog posts, doc edits) are not logged ; production deploys that take a component offline for more than 60 seconds are.
- 2026-06-17. Session 4 of the commercialization push : status page (this page), incident runbook published in repo, ISO 27001 readiness checklist filled. No public-surface outages.
- 2026-06-17. /deck, /onboarding, /blog (3 posts) shipped. Footer extended. No outages.
- 2026-06-17. Pricing populated (Verifier €0 / Starter €15K / Growth €45K / Enterprise €90K+), /why page shipped, /docs index shipped, /contact rewritten with structured intake, /demo wired to real AI Act bundles. No outages.
- 2026-06-17. Privacy / Terms / DPA / Security pages shipped at /legal/. No outages.
- 2026-05-26. Verifier-of-record consolidation : TD-WASM-VERDICT-LABEL closed, 7 producer-identity rejection sites refactored, 6 SERVICE_MODE TSA-hardening commits brought to master. No outages.
- 2026-05-21. verify.carvetrace.com custom-domain bind to Cloudflare Pages. Verifier-of-record (WASM) becomes production-canonical.
Questions about the status of a specific component, or want to be notified by email when this page changes ?
contact@carvetrace.com