// LOKI REVIEW MARK

A mark must be earned and verifiable.

The Loki review mark is not a public image or code snippet that anyone can copy. It may be displayed only after a qualifying authorized review, written approval and a unique verification record.

Current issuance model: not self-service. This page does not issue a badge, and a report does not by itself grant display permission.

Four conditions before any use

1. A bounded review expressly named and scheduled in a fully executed agreement with the applicable scope and Rules of Engagement.
2. Human review and release of the evidence and report.
3. Written approval for the organisation, system, wording, and display period.
4. A unique verification record where visitors can check scope, date, and status.

What a valid record must show

The unique record identifies the organisation and specific host, product, or scope, the review date, current status, unique record ID, and review limits. A screenshot, copied SVG, generic HTML snippet, or unlinked logo is not a Loki verification.

What the badge does not mean

A badge is not a certification, compliance statement, or guarantee that a system is free from vulnerabilities. Its meaning remains limited to the recorded scope and assessment date.