CryptoProof guide

CryptoProof Early Access — product guide

EARLY ACCESS · CryptoProof 0.1.6 · CRYPTOPROOF-2026-10-08-v2. Exactloom Works, operated by 髙橋一輝, offers a local questionnaire/evidence tool for business users in Japan and the United States. Purchase requests, payments and public downloads are currently closed. Current availability is shown at exactloomworks.com.

CryptoProof is a local command-line tool for a software vendor responding to a customer's cryptography or PQC questionnaire. It reads a vendor-supplied CycloneDX CBOM and a supported Excel questionnaire, drafts bounded technical answers with evidence references, preserves the original workbook as a separate output copy, and requires the vendor to review every question before a final Evidence Pack ZIP can be created.

What the first release includes

• CycloneDX 1.6/1.7 JSON input; a documented XLSX subset; normalized CSV input.
• Local questionnaire preflight, explicit column mapping when needed, and fail-closed rejection of unsupported workbook features.
• Explicit vendor acknowledgement of every nonempty sheet that has no recognized question mapping; the acknowledgement is bound to that sheet's content hash.
• Draft answers linked to observed CBOM evidence; PARTIAL, UNKNOWN, and OWNER_INPUT_REQUIRED remain visible rather than being guessed away.
• A local, scoped, dated library of vendor-approved organizational answers using narrow, documented templates. Its scope must exactly match the supplied CBOM product name. These are labeled OWNER_APPROVED, not technically verified.
• A draft workbook and customer-facing evidence artifacts. A final ZIP requires a decision on every question by the vendor's reviewer.
• Local processing. No source-code upload, cloud account, telemetry, or external LLM is required by the core workflow.

Limits a buyer must see before paying

CryptoProof supports only the documented XLSX subset. Preflight may reject a customer workbook. It does not process arbitrary XLSX, macro-enabled files, DOCX, or PDF; discover every cryptographic asset; verify runtime deployment; complete the entire questionnaire; remove the need for human review; or certify legal, audit, NIST, or other compliance. Claims are based on the supplied CBOM and may be incomplete. The vendor decides whether to disclose the generated files and remains responsible for organizational answers and final approval.

Use the buyer fit check before considering a purchase, the Quick Start for a first synthetic draft, the operating guide for the full workflow, privacy notes for local data handling, and support policy before relying on the tool. The refund policy and complete Software License state the conditions for qualifying orders.

Business license

The intended price is US$99 one-time for one business entity with no seat/device or per-pack cap, using the existing Paddle-based Exactloom Works sales design. Reviewed outputs about the purchaser's own products may be sent to its customers; redistribution of the software and services for third-party products are excluded. See the complete Software License and seven-day voluntary defect Refund Policy. The first 5–10 paying vendors would provide post-launch voluntary aggregate validation, not a prepublication free-tester requirement. No public Checkout or download is enabled at the time this candidate was prepared.