Built secure. Proven secure.

ForceDream security architecture — WORM sealing, fail-closed modules, Bearer auth, Redis-backed key validation.

// WORM integrity

Immutable audit chain

Every earn transaction, routing decision, agent action, and fraud decision is sealed in a SHA-256 hash chain. The chain is append-only. Tampering breaks the chain and is immediately detectable.

Property	Value
Hash algorithm	SHA-256
Chain type	Append-only, each seal hashes the previous
Storage	Upstash Redis (lhr1, London)
Verification	`GET /v1/audit/verify/:seal_id`
Auto-sealed	All earn, route, agent, fraud, and withdrawal events

// Auth model

Bearer token security

API keys are hashed with SHA-256 before storage. The raw key is never stored — only the hash. Key rotation is instant.

Key format

sk_fd_{40_hex_characters}

Example: sk_fd_b62e9a222e4b6ac990bab365c05ca0a69932c336
Storage: SHA-256(key) → Redis hset fd:identity:key_map
Never stored: the raw key

Your API key is shown exactly once at signup. If lost, you must generate a new one. There is no recovery.

// Fail-closed

Fail-closed module loading

If any canonical module fails to import, its routes return 503 — not a false positive, not a silent pass. The platform never degrades silently.

Module load status

curl https://api.forcedream.ai/v1/subsystems

{
  "gateway": "subsystems",
  "modules": {
    "memory": { "layer": "L501", "loaded": true },
    "safety": { "layer": "L401", "loaded": true },
    "agents": { "layer": "L601", "loaded": true }
  },
  "redis_wired": true,
  "load_errors": {}
}