Assurance capabilities and federal posture.

What Blackbox Systems provides

Receipt chains, manifests, cryptographic binding, declared releases and independent verification: deterministic evidentiary infrastructure that lets a third party check a record rather than take a claim on trust. Capabilities are described at their current proof state, not their intended state.

Parent company

Mediator Solutions LLC is an Arizona domestic limited liability company, member-managed, perpetual duration. Articles of Organization filed 1 April 2026. Arizona Corporation Commission business ID 25041335. Filing number 04012608480385. Effective date 1 April 2026. Character of business: general business operations including digital services, systems development, and commerce. NAICS 541511 and 541512. D-U-N-S 14-503-0179.

Principal and mailing address on the formation record: 3101 N Central Ave, Ste 183 #7042, Phoenix, AZ 85012-3616. Statutory agent: Republic Registered Agent LLC, 3101 N Central Ave, Ste 183, Phoenix, AZ 85012.

Federal identity: current status

Unique Entity ID R2KVBJF18MG6 is assigned in SAM.gov. Full SAM.gov registration is not complete. The entity has a Unique Entity ID only, so it is not yet eligible for awards that require an active SAM registration. CAGE is not issued. APEX Accelerators engagement is underway.

A System and Organization Controls (SOC) 2 Type I report is targeted for Q1 2027 and is not yet audited or attested. Independent evaluation and insurance arrangements are in progress. Assigned, underway, targeted, and in progress do not mean award or certification.

Core competencies

What the assurance product actually does, stated at current proof state:

• Deterministic receipt and manifest infrastructure — append-only, hash-chained records that preserve order, provenance and integrity, and that fail closed on contradiction rather than normalizing a damaged state into apparent validity.
• Portable, independently verifiable evidence — detached signatures, declared release manifests and verification that an outside party can perform without the originating runtime or the vendor’s cooperation.
• Authorized security validation — web, API, configuration, tenant-isolation, agentic and infrastructure surfaces tested only under written scope and Rules of Engagement, with reproducible findings and a bounded retest.
• Evidence continuity at the handoff — preserving source identity, exact artifacts, receipt state and re-verification material when records cross from one system, custodian or reviewer to the next.

Differentiators

The posture that separates this from a dashboard or a report:

• Checkable, not asserted. Every capability resolves to evidence a third party can verify independently, rather than a claim taken on trust.
• Stated at proof state. Capabilities are described at what has been demonstrated, with the boundary named — assigned, underway, targeted and in progress are kept distinct from award and certification.
• Authority before action. Security work runs only inside recorded authorization; the boundary is honored in both directions and ambiguity halts the work.
• Portable by construction. Evidence is engineered to survive leaving the system that produced it, which is the property an auditor, a court or a successor custodian actually needs.

Authorization boundary

Security validation runs only inside written authorization, defined target scope and Rules of Engagement. Public material describes bounded capabilities and current proof posture; it does not confer testing authority, certification, legal admissibility or access to private systems.