8-POINT DIAGNOSTIC • 100% LOCAL IN-BROWSER SCORING

Executive & Self-Custody Continuity Readiness Audit

Assess whether your family, co-founders, or fiduciary counsel could actually recover self-custody assets, corporate cloud infrastructure, and legal directives without exposing live credentials today. Zero answers ever leave your browser.

Progress: 0 of 8 controls evaluated Zero network transmission

1. If you were incapacitated tonight, how would your heirs or co-signers locate your hardware wallet BIP39 passphrase (25th word) or master recovery secrets? PILLAR 1 • SELF-CUSTODY & PASSPHRASE SURVIVAL

Only I know it in memory, or it is stored on a single paper/metal backup anyone could steal if found early. Shared informally with a spouse or stored inside a cloud password manager Emergency Access account. Sealed in a zero-knowledge, time-locked split-custody deposit that cannot be decrypted while I am checking in.

2. For multisig vaults (2-of-3 / 3-of-5) or cold wallets, are your full wallet output descriptors (xpubs + derivation paths) archived for your successors? PILLAR 1 • MULTISIG WALLET OUTPUT DESCRIPTORS

No—heirs would only find seed words without knowing the coordinator software, script type, or co-signer xpubs. Stored in plaintext inside an email draft, USB stick, or third-party custodial inheritance portal. Encrypted client-side alongside step-by-step recovery instructions with SHA-256 integrity verification.

3. Could your company survive 72 hours without your personal smartphone/YubiKey for Cloudflare/DNS registrar, AWS/GCP root MFA, and production signing keys? PILLAR 2 • CORPORATE ROOT & FOUNDER BUS FACTOR

No—critical root accounts, domain registrars, or treasury approvals depend on my personal device (Bus Factor = 1). A co-founder or IT admin already has live standing root credentials today (creating insider/compromise risk). Break-glass root credentials are sealed under a Dead Man's Switch that releases only upon missed check-ins.

4. Can your estate attorney, notary, or designated executor read your confidential credentials BEFORE a legitimate emergency occurs? PILLAR 2 • FIDUCIARY & PREMATURE INSIDER EXPOSURE

Yes—they currently hold an unsealed envelope, plaintext document, or live shared vault login. They hold encrypted files, but the decryption password is stored in the same office or email thread. Mathematically impossible while active: Envelope v3 split-key time-lock prevents decryption until timer expiry.

5. What happens to your digital inheritance setup if your credit card expires or fails while you are hospitalized for 60 days? PILLAR 3 • HOSPITALIZATION & BILLING CONTINUITY

Recurring SaaS subscription could lapse, lock the account, or delete vault access during incapacitation. Relies on manual renewal by family members who may not have access to my billing email. Prepaid fixed-term bearer pass with a mandatory 30-day protective grace period—active timers never abort early.

6. If your continuity vendor's website went offline 10 years from now, could your beneficiaries still decrypt your archive on an air-gapped laptop? PILLAR 3 • 20-YEAR VENDOR-INDEPENDENT OFFLINE RECOVERY

No—recovery requires logging into a proprietary vendor web app, mobile app, or live API server. Requires installing command-line GPG/OpenSSL tools that non-technical family members struggle to operate. Yes—a zero-dependency standalone .html Offline Recovery Kit decrypts locally in any browser via file:///.

7. If forced under duress (border inspection or physical coercion) to unlock your continuity vault on screen, what happens? PILLAR 4 • BORDER CROSSING & PHYSICAL COERCION OPSEC

I would be forced to reveal my real master vault or trigger an obvious error/alarm that endangers me. I delete apps before travel, leaving me unable to perform scheduled presence check-ins cleanly. An Emergency Duress Password returns an identical HTTP 200 check-in with a believable Cover Note + 24h silent lock.

8. Does your spouse, counsel, or notary hold a clear physical handover sheet with a Recovery URL, Deposit ID, and ink-only Recipient Password? PILLAR 4 • EXECUTOR CLARITY & VERIFIABLE HANDOVER

No documented handover protocol exists yet—beneficiaries would have to guess where to look. Verbal instructions or scattered notes without a tested end-to-end recovery rehearsal. Yes—a printed Safe/Notary Handover Certificate with offline .html kit and tested 5-language recovery instructions.

ZEROCANARY EXECUTIVE CONTINUITY & BUS-FACTOR REPORT

Readiness Score: 0 / 100

—

Pillar Sub-Scores
Pillar 1 — Self-Custody & Multisig Descriptors	—
Pillar 2 — Corporate Bus Factor & Split Custody	—
Pillar 3 — Billing Grace & 20-Year Offline Kit	—
Pillar 4 — Travel Duress Shield & Executor Handover	—

Priority Architectural Remediations

Remediate Now in Vault Console ($0 Sandbox) View Sovereign Passes ($49–$490)