{"checks":[{"date":"2026-10-22","limitations":"Synthetic records and controlled provider behavior, with test identities enrolled for current MFA requirements. This is a selected workflow exercise, not validation of every feature, bank or country setup.","scope":"Selected invoice, bill, payment, manual CSV bank-reconciliation, period-close and company-isolation scenarios exercised through the application routes.","summary":"66 workflow checks passed using fictional companies and records.","title":"A month of accounting workflows"},{"date":"2026-10-22","limitations":"Internal engineering checks on a fixed source revision. The hardening race scenario does not establish multi-user capacity. A complete product qualification has not passed.","scope":"Selected ledger integrity, posting controls and regression scenarios. The separate performance dataset also passed 16 financial and database checks.","summary":"Three additional accounting selfcheck suites passed: integrity, controls and hardening regression.","title":"Accounting integrity and controls"},{"date":"2026-10-17","limitations":"Dated regression evidence, not a fresh full-product security audit. The skipped case concerned a reverse-proxy configuration outside that release. No independent penetration test or security certification is claimed.","scope":"Selected authentication, tenant separation, support throttling and release safeguards in the 17 October security release.","summary":"724 targeted cases passed, with one documented skip and no failures or errors in that run.","title":"Access and security regression checks"},{"date":"2026-10-18","limitations":"The exercise did not boot the restored application or rebuild Linux services, private configuration, proxy, TLS or DNS. It does not establish a complete disaster-recovery time.","scope":"Verified backup download, ciphertext matching, extraction and removal of temporary plaintext after the exercise.","summary":"An isolated exercise recovered 20 databases and 308 runtime files from an independently downloaded encrypted backup.","title":"Encrypted backup recovery exercise"},{"date":"2026-10-21","limitations":"These checks covered that release, not complete accounting or security qualification. Counts overlap with other suites and are not added together.","scope":"That release covered public accounting descriptions, discovery files, page metadata and preservation of private-access boundaries.","summary":"The accounting-information release passed 89 native Linux checks and its desktop, phone and public HTTPS checks.","title":"Public website release verification"}],"coverage_limits":["Selected internal engineering exercises; complete product qualification remains in progress.","No independent penetration test, statutory certification or competitor safety comparison is established.","Historical results retain their original dates and apply to their recorded releases."],"evidence_identifiers":{"benchmark_workload":"80608204cf1f8127ee914fcd8d93d1b5c08546b1f63cf754917f6f48c2bf6043","financial_engine_source_manifest":"4f8cccbaacdcce0717ade5b33f0bb5209e99ce34ed0470f394db6ac3e821f6be","native_accounting_and_performance_receipt":"3108c05dc524cf0fdc010872b734bed55b45382154db3efdbe6174eb403c225d","public_release_checks":"f1802409ba5cda6c139a4e9e51d574640beb9f5ffdefac001c99b1a4ca34529a","recovery_exercise":"38b76693fcadad9bc309f30c2f4389945a06517e3f42f45a78bfe5d3ff037430","security_checks":"a2823a52ae178fc1b88ea13c5e23fc3655f9b2639cd3e1d18b86156817c55c8d","synthetic_identity_fixture_adapter":"87b45ab64ba8c3426ae8ec4e410c1748cf4dca0a42655d005ac5b07e4cad5788"},"performance":{"dataset":"One fictional company: 1,000 sales invoices, 1,000 supplier bills, 1,000 allocated payments and 105 manual-journal reversal pairs; 3,210 journals and 8,420 entries in total.","environment":"Linux x86_64; Python 3.12.15; SQLite 3.34.1. One sequential worker on the application VPS, isolated from customer data; WAL mode and synchronous=NORMAL.","limitations":["HTTP requests, browser rendering and network latency are excluded. These are operation timings, not end-to-end page-load times.","The database grows during posting phases; reports use the final dataset. One sequential writer was measured, so no concurrent-user capacity, uptime or response-time guarantee is established.","The VPS also hosts other services and the test has resource and audit limits. Results describe this run and workload; different customer data and workloads can differ.","Performance checks do not establish complete feature coverage, integration approval, country compliance or that Kaupify is safer than another product."],"measurement_scope":"Backend posting and real report queries only. Reports include opening and closing a SQLite connection. Warm cache; five initial warm-ups excluded. Each posting row has 100 samples; each report row has 50. The measured financial engine is unchanged in this page release.","metrics":[{"label":"Post a sales invoice","median_ms":0.224929,"p95_ms":0.513496,"samples":100},{"label":"Post a supplier bill","median_ms":0.242115,"p95_ms":0.418119,"samples":100},{"label":"Record and allocate a customer payment","median_ms":0.149865,"p95_ms":0.316483,"samples":100},{"label":"Record and allocate a supplier payment","median_ms":0.160666,"p95_ms":0.31377,"samples":100},{"label":"Post a manual journal","median_ms":0.060522,"p95_ms":0.093553,"samples":100},{"label":"Reverse a manual journal","median_ms":0.237539,"p95_ms":0.516559,"samples":100},{"label":"Query the trial balance","median_ms":3.478143,"p95_ms":4.304222,"samples":50},{"label":"Calculate profit and loss","median_ms":3.27,"p95_ms":3.483477,"samples":50},{"label":"Calculate the balance sheet","median_ms":3.093856,"p95_ms":3.260847,"samples":50}],"tested_on":"2026-10-22"},"product":"Kaupify","published_on":"2026-10-22","schema":1,"status":"verified_selected_checks","tested_revision":"4f8cccbaacdcce0717ade5b33f0bb5209e99ce34ed0470f394db6ac3e821f6be"}
