# ZeroCanary — Cryptographic Digital Continuity & Executive Inheritance Platform

> ZeroCanary (`https://zerocanary.com`) is a zero-knowledge, client-side encrypted digital continuity and fiduciary deposit platform operated by **Gexiro Global Enterprises Ltd** (Gibraltar). It enables private individuals, founders, family offices, and law firms worldwide to seal confidential instructions, recovery keys, and multi-file document archives inside the browser so designated recipients can unlock them only when the check-in timer expires — or offline via a standalone air-gapped HTML decryptor.

## Core Cryptographic & Dual-Plane Custody Architecture
- **Client-Side Zero-Knowledge Encryption (`<= 50 MB` Multi-File):** All text directives and multi-file binary attachments (`<= 50 MB`, automatically bundled into a client-side `.zip` archive when multiple files are selected; executable formats blocked at the edge) are encrypted locally via W3C WebCrypto (`AES-256-GCM` + `PBKDF2-HMAC-SHA256` with `600,000` iterations) prior to transmission.
- **Dual-Plane Storage & Threshold Notary:** Encrypted envelopes and binary ciphertext streams reside exclusively in **European Union Sovereign Zero-Knowledge Object Custody** (`0` plaintext or key visibility), while cryptographic `SHA-256` commitments, autonomous Dead Man's Switch countdown state, and `secp256k1` threshold release attestations execute on an **Autonomous Decentralized Mainnet Threshold Notary**.
- **Three-Role Cryptographic Key Separation (Envelope v3):** Supports distinct `Owner Main Password` (for check-ins and two-way deposit updates via `RFC 5802 SCRAM-SHA256` mutual challenge-response), `Emergency Duress Password`, and optional separate `Recipient Unlock Password` combined with a server-held time-lock share (`wrappedReleaseKeyB64`), preventing premature decryption before timer expiration while preserving 100% zero-knowledge non-custody.
- **Zero-Oracle Coercion Shield (Plausible Deniability):** Entering the `Emergency Duress Password` returns an indistinguishable `HEARTBEAT_VERIFIED` check-in and displays a plausible Cover Note on screen while enforcing a `24-hour` public coercion lock (`423 Locked`) and dispatching an optional HMAC-signed counsel webhook (`?ert=` emergency recovery token).
- **Standalone Air-Gapped Offline Recovery Kit (`.html`):** Zero-dependency W3C WebCrypto decryptor file with built-in multilingual interface (`EN`, `DE`, `ES`, `FR`, `PL`) that embeds ciphertext up to `20 MB` directly inside the `.html` file for 100% air-gapped offline decryption (`file:///`) and streams larger `20–50 MB` encrypted archives from EU zero-knowledge custody upon release authorization.
- **Fiduciary Handover & Check-In Guard:** Local printable Safe / Notary Fiduciary Handover Certificate (with Deposit Reference ID, Recovery Link, `SHA-256` digest, and ink-only password box) plus zero-email RFC 5545 `.ics` calendar reminder schedules.

## Public Pages & Machine-Readable Endpoints
- `https://zerocanary.com/` — Global Continuity Platform, Interactive Scenario Simulator, Pricing, and 4-Tab Fiduciary Vault Console (`EN`, `DE`, `ES`, `FR`, `PL`).
- `https://zerocanary.com/press` — Official Institutional Press & Media Kit, vector brand logos, editorial boilerplate, and localized press cards.
- `https://zerocanary.com/.well-known/security.txt` — RFC 9116 Security Disclosure Policy.
- `GET https://zerocanary.com/api/v1/health` — Public edge health status.

## Continuity Pass Tiers & Global Settlement
1. **Evaluation Mode (`$0`):** Instant 1-hour check-in timer for browser testing of client-side encryption, three-role password separation, two-way editing, and Offline Recovery Kit (`.html`) generation.
2. **Private Sovereign Pass (`$49 / 3M`, `$89 / 6M`, `$149 / 12M`):** Anonymous Bearer Voucher (zero personal account required), up to 10 active deposits, encrypted multi-file attachments (`<= 50 MB`), all check-in intervals (`24h` to `365d`), and 30-day protective grace period.
3. **Law Firm & Family Office B2B (`$490 / 12M`):** Institutional annual retainer with unlimited client deposits, encrypted multi-file attachments (`<= 50 MB`), HMAC-signed HTTPS webhook outcalls (`X-ZeroCanary-Signature`), and automated B2B VAT invoicing.
4. **Global Payment Rails & Roadmap:** Live global settlement via Stripe Institutional Checkout (`Apple Pay`, `Google Pay`, `Visa / Mastercard`, `Instant Bank Transfers`, and `Law Firm B2B VAT Invoices`). Sovereign non-custodial cryptocurrency checkout (`BTC`, `USDC`, `ETH`) and opt-in Assisted Email Notifications are scheduled on the public product roadmap.

## Operator & Institutional Contact
- **Legal Operator:** Gexiro Global Enterprises Ltd (Gibraltar)
- **Custody & Notary:** European Union Sovereign Zero-Knowledge Custody · Autonomous Decentralized Mainnet Threshold Notary
- **Official LinkedIn Showcase:** https://www.linkedin.com/showcase/zerocanary/
- **Official GitHub Specification & Security Hub:** https://github.com/gexiro-global/zerocanary
- **Official X Channel:** https://x.com/zerocanary_com
- **Parent Operator X Channel:** https://x.com/GexiroLtd
- **Press & Legal Desk:** mailto:legal@gexiro.com