pulseproof-sentinel

PulseProof Sentinel Protocol — Documentation

This directory contains the documentation for PulseProof Sentinel Protocol, abbreviated PPS.

PPS is an experimental, time-bound, asymmetric authentication protocol designed to complement WebAuthn/FIDO2 in offline, OTP-style, terminal-friendly, transaction-signing, duress-aware, and multi-device approval scenarios.

Status

Item Value
Protocol PulseProof Sentinel Protocol
Abbreviation PPS
Protocol Version 1
Status Experimental
Internet-Draft draft-hezami-pulseproof-sentinel
Specification SPEC.md

PPS is not audited and should not be used in production without independent security review.

Documentation Index

Document Description
overview.md High-level introduction to PPS, core concepts, flows, and use cases.
comparison.md Comparison with TOTP, SMS OTP, Push 2FA, challenge-response OTP, and WebAuthn/FIDO2.
threat-model.md Assets, attackers, threats, mitigations, assumptions, and residual risks.
implementers-guide.md Practical guide for implementing PPS in PHP, JavaScript, Python, Go, Rust, and other languages.
faq.md Frequently asked questions about PPS, WebAuthn, TOTP, duress, threshold mode, patents, and deployment.
ietf.md IETF status, draft revisions, feedback process, mailing lists, and IPR notes.
deployment-guide.md Operational deployment guidance, database design, rate limiting, monitoring, migration, and production checklist.
duress-guide.md Silent duress and Honey-Pulse design, UX, server behavior, and operational playbook.
threshold-guide.md Offline multi-device approval, n-of-m multisignature, group registration, and future FROST support.
policy-guide.md Dynamic policy binding, risk-adaptive authentication, and policy examples.

If you are new to PPS, read the documents in this order:

  1. overview.md
  2. comparison.md
  3. SPEC.md
  4. implementers-guide.md
  5. threat-model.md
  6. deployment-guide.md

If you are reviewing the protocol for IETF or security feedback, focus on:

  1. SPEC.md
  2. threat-model.md
  3. comparison.md
  4. implementers-guide.md
  5. duress-guide.md
  6. threshold-guide.md
  7. policy-guide.md

Relationship to WebAuthn/FIDO2

PPS is not intended to replace WebAuthn/FIDO2.

WebAuthn is preferred for browser-based, origin-bound, phishing-resistant authentication.

PPS is intended for scenarios where WebAuthn is unavailable or insufficient, such as:

Experimental Warning

PPS is experimental.

It has not been independently audited.

Do not use PPS in production without: