Modern facilities run on networked control systems — HVAC, power, fire, lighting, access. On federal projects, a cybersecurity record for those systems is a required part of turning the building over. Cornerstone builds that record from what the network actually contains, seals it so it can't be quietly changed, runs it through government review, and lets anyone verify the result — without ever exposing the facility.
Public verification desk live · 0 records published · chain intactThe HVAC, power and fire systems used to be dumb and isolated. Today they sit on IP networks, are often reachable from outside, and are a routine path into a facility and everything behind it. Federal construction contracts require a full control-system cybersecurity turnover package — dozens of interlocking submittals covering inventory, network flows, hardening, ports and protocols, and testing.
Today that package is assembled by hand in spreadsheets and Word templates. It takes weeks, it's stale the day the doors open, and — worst of all — the government office receiving it has no way to check whether the paper matches the wire. A record no one can verify is worth very little. That is the gap Cornerstone closes.
Drawn from what the control network actually contains, cross-checked against the design — not a template someone filled in from memory.
Every fact is folded into a sealed, hash-chained record. Change one line after the fact and the seal breaks.
A reviewer, insurer or lender can confirm the record independently — carrying only fingerprints and counts, never facility data.
The turnover package sits between the people who build a facility and the people who accept and insure it. Cornerstone gives each of them the thing they actually need.
Cornerstone is an evidence engine, not a document template. Facts enter once, are reconciled against reality, and flow outward into every submittal — each one traceable back to the file it came from.
Device inventories, network captures and STIG results are parsed and folded into one graph — with 13 industrial-protocol dissectors reading what's really on the wire.
As-built is compared to as-designed. Undocumented devices, unexpected connections and missing controls surface as findings instead of hiding.
The required submittals are generated into the official templates. A readiness engine says exactly what's ready and what blocks the rest.
The baseline is sealed into a hash-chained record, signed, packaged, and published here for anyone to verify — offline, no facility data.
Capture → Reconcile → Generate → Readiness → Government review → Seal → Registry → Drift watch
Not a slice of the problem. Every stage from raw evidence to an authorization handoff is built, and every stage leaves a verifiable trail.
Every generated line traces back to the SHA-256 of the input file it came from. The package isn't a claim about the building — it's a chain of evidence about it.
The whole record is an append-only, hash-chained ledger. Alter one earlier fact and every hash after it breaks — a reviewer can prove the record hasn't been quietly edited.
Each signed submittal is bound with an Ed25519 signature to the exact artifact bytes it approves. Change the document and the signature no longer verifies — and it can't be transplanted onto anything else.
Dispositions, comments, resolutions and revisions are run inside the record — with a comment-resolution matrix and a resubmittal diff at file-hash granularity, so it's clear exactly what changed between rounds.
The finished evidence exports as an eMASS-ready hardware baseline, software baseline and POA&M — carrying the record forward into the authorization process instead of stopping at a stack of documents.
After handover, the sealed baseline is compared to the network as it changes. A new controller, a firmware change, an unexpected outside connection — reported, not buried in a log no one reads.
Cornerstone is built around one idea the alternatives skip: a record is only worth what it can be proven to be.
The published record carries only hashes and counts. A third party proves it's genuine and unaltered — while facility details never leave the enclave.
Discovery tools find assets but emit no submittals. Review tools shuffle dumb attachments. Cornerstone spans capture → evidence → submittals → review → ATO → drift.
The verifier runs entirely in the browser using built-in cryptography — no upload, no network, nothing leaves the machine. It works inside a disconnected facility.
Controlled information is marked correctly on every artifact, and the public verification surface is a separate application that can never reach a project's sensitive data.
Cornerstone covers the interlocking submittals a control-system turnover requires, from the device inventory through ports-and-protocols to the witnessed testing report. A selection:
You don't need an account or access to the building to check it. Paste the sealed record and confirm in seconds that its seal is genuine and nothing has been altered.