Foreword

Ryan James York, born in Makiki, Honolulu, Hawaiʻi, in 1995, is a security engineer and the founder and chief executive of SSX360 Corp., a Delaware corporation based in Honolulu. SSX360 builds cryptographic provenance and independent audit tooling for automated authorization and payment systems: evidence that an action was permitted, by whom, and in what order, in a form that a third party can verify without trusting the party that produced it. The company also runs a 2D carbon thin-film programme for hardware security, working with academic characterisation partners and with access to dry and wet laboratories and their instruments.

He is the author of Matrix Scroll, an open-source provenance protocol released under the Apache-2.0 licence and distributed on PyPI. Matrix Scroll signs work at the moment it is committed, scans tool servers for trust properties, and gates continuous-integration pipelines on that evidence; its trust scanner reached the top of Show HN on release. He also maintains MCV-1, an open and versioned set of criteria for machine-verifiable evidence, described in Chapter 2.

His hands-on work spans post-quantum signatures (FIPS 204 ML-DSA and FIPS 205 SLH-DSA alongside Ed25519), hardware signing devices built on secure elements, adversarial evaluation of machine-learning models, and hardened container infrastructure; the systems he has built are listed in the Curriculum Vitae. Before SSX360 he was Chief Real Estate Officer at CPY Partners from 2019 to 2024, where he opened and ran the firm's research and development wing, a quantitative investment team drawn from MIT and Northeastern University.

Subjects of this library

The library is organised around three subjects, each with its own chapter. Chapter 1 treats hardware security: the security properties that come from physical objects, and the conventions used here to reason about them. Chapter 2 treats cryptographic provenance: digests, signatures, append-only ledgers, and the standards that make evidence checkable. Chapter 3 treats 2D carbon thin films: Raman characterisation of graphitic and disordered carbon, the pipeline that turns spectra into evidence, and the programme that is moving that pipeline from modelled to measured data.

New results are released as numbered Findings. Each carries a release date, a version, and the digest of its source, so that a reader can cite it precisely and verify that what they read is what was released. The library opened in September 2026; the work it records began in 2024, and where a finding reports work completed before the library opened, the finding says so. Groups of findings are compiled into preprints, listed under Publications.

Correspondence

Correspondence about the contents of this library may be sent to mission@ssx360.com. His ORCID iD is 0009-0007-5979-7949; professional details are kept on LinkedIn. The company's own site is ssx360.com.