About this document

Stewardship, and
the state of things.

Who wrote this, what it is today, what would have to change for it to become something more — and the questions that are genuinely still open.

Current state

What is true today.

Governance follows participants. Today the work is stewarded by one author, in public — every decision and its rationale recorded in the repository. The structure that will govern it as contributors arrive is already written down in GOVERNANCE.md, and activates with the first of them.

Author and maintainerJavier Galindo · ANKATech Solutions INC
ImplementationsANKASecure©
StatusReference architecture, v0.11 Working Draft. Not a standard
LicenceCC BY 4.0 — freely reproduced, cited and adapted with attribution

What this is looking for

Two things, in that order of value. A second, independent implementation — this architecture cannot be evaluated on one, and being argued with is worth more than being agreed with. And disagreement on the substance: the domain boundary, the capability list, the maturity model, the claim that governance can converge while trust stays distributed.

Contributions arrive as issues and pull requests on the repository. Every change and its rationale is recorded in public.

What changes when contributors arrive

These are commitments, not descriptions of anything that exists. The first contributor with a sustained record is invited to maintainership, which is personal and not tied to an employer. When three or more independent organizations are engaged, decision-making moves to a shared model and the governance document is rewritten by them rather than by ANKATech.

The full text is in GOVERNANCE.md. It is deliberately short, and it stays short until there are people to govern.

Provenance The Cryptographic Control Plane concept and the CAPA framework were developed at ANKATech Solutions INC through research and product development in post-quantum cryptography. The foundational whitepaper — The Cryptographic Control Plane: A New Architecture for Continuous Cryptographic Evolution — is the source document, and where the two differ in wording, the whitepaper governs.
Open questions

Areas of active development.

This reference architecture explicitly acknowledges areas requiring community input. We invite engagement from enterprise architects, security researchers and cryptographic engineers on the following.

01

A CCP API specification

This document defines the architectural requirements for a Control Plane but does not specify a wire protocol or API contract. Should the community converge on a common API specification to enable interoperability between applications and CCP implementations?

This is the artifact that would legitimately be a standard. It does not exist — which is why this material does not use the word.

02

Conformance and certification

What constitutes a conformant implementation, and who certifies it? There is no conformance suite, no test harness and no certification body today. Should there be — a self-assessment framework, a test suite, an independent certifier? Each implies a different governance model. Until this is answered, listings are self-declared.

03

Open-source reference implementation

Should there be an open-source implementation of the required capabilities, and under what governance? One would accelerate adoption, provide a testbed for the architecture, and lower the barrier for organizations evaluating the approach.

04

Integration with existing standards

How should this reference architecture relate to NIST SP 800-57 (key management), NIST SP 800-131A (algorithm transitions), ETSI TS 119 312 (cryptographic suites), ISO/IEC 19790 (cryptographic modules), and emerging PQC migration guidance? It should complement rather than duplicate them, but the precise integration points need community input.

Current position: this material scopes itself to application and data cryptography and treats PKI, transport cryptography and key infrastructure as complementary rather than superseded. How that scoping should be expressed relative to the documents above remains open.

05

Multi-cloud and hybrid deployment patterns

The reference architecture describes a logical stack but does not prescribe deployment topology. What are the recommended patterns for operating a CCP across multi-cloud, on-premises and hybrid environments while maintaining cryptographic sovereignty?

Current position: the architecture requires that governance converge without requiring trust domains to be consolidated — Centralized Governance, Distributed Trust. The concrete topologies that satisfy this across specific provider combinations remain open.

We explicitly invite contributions from enterprise architects, security researchers, standards bodies and cryptographic engineers. Reach out at contact@cryptographiccontrolplane.org or open an issue on the project repository on GitHub.

Document history

How this framework evolved.

May 2025

Initial framework — Three foundational pillars identified: Crypto-Agility, Cryptographic Sovereignty, and Frictionless Modernization. Developed through early research in post-quantum cryptography infrastructure at ANKATech Solutions INC.

January 2026

Extended to five pillars — Governance and compliance capabilities added following engagement with enterprise clients, security architects and academic reviewers. The framework began to address the full spectrum of organizational cryptographic capability.

March 2026

CAPA formally defined — The Crypto Agility Posture Architecture framework named and structured. Cryptographic Maturity Model established (6 levels). Foundational whitepaper published: The Cryptographic Control Plane: A New Architecture for Continuous Cryptographic Evolution.

May 2026

Published as v0.9 — Released as an open, vendor-neutral architectural document, under the title CCP Standard. Migration path and modernization programme defined. Open questions established for community engagement. Published under CC BY 4.0.

September 2026

Realigned to whitepaper V2 — Three substantive changes. Centralized Governance, Distributed Trust established as a core architectural principle: the Control Plane centralizes governance, not cryptographic custody or execution. The domain boundary stated explicitly — the Control Plane governs application and data cryptography, and does not replace TLS, QUIC, SSH, IPsec or PKI. The CAPA pillars restructured: governance and compliance merged into a single context-aware pillar, and Enterprise Readiness introduced as the fifth. The enterprise cryptographic stack expanded from four layers to six, and the migration path restated as three parallel tracks and five activities.

September 2026

Repositioned from “standard” to reference architecture — The material had been published under the title CCP Standard, a claim the foundational whitepaper never made: it describes the Cryptographic Control Plane as an architectural layer and CAPA as a framework, and uses the word “standard” only for external ones. The site is brought back into line with its source. Standard is now reserved for an interoperability specification and a conformance suite that do not exist — Open Questions 1 and 2. Claims of evaluation and certification were removed, the required capabilities kept. The governance document was cut to a short stewardship statement declaring that no committee or maintainer group exists yet. Authorship made explicit.

September 2026

Aligned to a later revision of the whitepaper — Three corrections and one addition. The claim that the Control Plane does not execute was wrong and is withdrawn: governance is centralized, and execution is merely not required to be — a Control Plane may execute directly through its own engines while key protection stays anchored to an external Root of Trust. Hardware and trusted execution are no longer a separate stack layer, being embedded within the infrastructures above them, and the stack now distinguishes execution-path layers from posture and context. PKI placement is role-dependent rather than fixed. Added: representation coupling as a second dimension of the problem, with its interoperability boundary; the six capability areas; and, for each CAPA pillar, four sub-capabilities and a practical test.