TRUSTLESS Proposal activity: DS-01 CSA (also integrated into 4-5M€ DS-01 RIA & ICT-12 proposals) Proposal Name: Trustless end-2-end high-assurance IT certification framework for increased digital rights, public safety and EU sovereignty. Proposal Acronym: TRUSTLESS Role: Proposal coordinator Rufo Guerreschi, Exec. Director Open Media Cluster SMIG January

Proposal idea/content AIM: Support approved high-assuranceRIA and IA DS-01 Proposals HOW: Catalyze global multidisciplinary and multi-stakeholder processes leading to new socio-technical certification and certification governance paradigms, frameworks for ultra-high assurance end-2-end IT services/experiences, including ALL critical components, parts, processes, factors and contexts involved during operation and lifecycle. IMPACTS: (a) achieve unprecedented and constitutionally-meaningful levels of actual and perceived assurance and (b) promote open target architectures for wide-market deployment; while: (c) only moderately increasing disadvantages/disutilities to the user and to the service provider; and (d) overall increasing targeted cyber-investigation capabilities, and overall increasing public safety. Advanced proposal drafts, partners and boards available on request SMIG January

Project participants Participants to date: Open Media Cluster (Project Coordinator) EJ Consultants Partners sought, in theare of high or ultra-high assurance IT: Participants with capabilities to best carry on the activities and/or to attract the widest participation from relevant actors. Advisors with assurance certifications expertise Certification and standardization bodies (public or private) and national certification laboratories or standard setting agencies Small or large IT firms that are highly resistant to foreign and economic pressures. SMIG January

About Us: Open Media Cluster ● What: A micro non-profit R&D/innovation center in Rome, Italy, pursuing leading­-edge R&D on dual-use privacy­ and security­-enhancing ICT technologies for civilian and dual-use markets. ● Single Focus: Together with uniquely-qualified global R&D partners and advisors, attract R&D funding on the TRUSTLESS R&D project, and promote a related certification body through a global event series, Free and Safe in Cyberspace.R&D partnersadvisorsFree and Safe in Cyberspace ● Expertise: Outcome of 15 years of expertise in e-voting, e-participation, free software, and bleeding-edge privacy-enhancing technologies and solutions, through NGO and SME work of exec. dir. and leading staff. World-class advisory boards.advisory boards ● Mission: Enabling unprecedented and constitutionally-meaningful e-privacy for all, while increasing public safety. ● History: Established in May 2011, to provide the core innovation center and R&D project to provide industrial critical mass of the Open Media Park, a planned 47,000 sq.mts.140M€ ICT/media media/ICT park in Rome, Italy.Open Media Park 4

● Aim: Develop, from existing open components, a complete computing platform, ecosystem & certification body for critical dual-use IT communications, that provides unprecedented and constitutionally-meaningful levels of information assurance, while overall substantially increasing public safety. ● How: (A) Kick-start an extremely open and resilient ecosystem, a certification body, and a complete critical SW/HW stack for an end-2-end computing platform, for basic voice & text communications, that is devoid of the need or assumption of trust in anyone or anything - except in the intrinsic resilience of all socio-technical organizational processes critically involved in the entire lifecycle (from standards setting to fabrication oversight) against decisive attacks of up to tens of M€s, as assessable by an informed and moderately educated citizen. (B) a global event series, Free and Safe in Cyberspace, aimed at new international high-assurance standards and certification bodies for dual-use highest- assurance IT, the Trustless Computing Certification Initiative.Free and Safe in CyberspaceTrustless Computing Certification Initiative ● Key & unique concepts: (1) Complete verifiability, extreme compartmentation and minimization and sufficiently extreme verification relative to complexity of all critical HW&SW; (2) Citizen/peer-witness oversight of all critical service components, including ICs fabrication, and server-room access, including for lawful access requests; (3) Expert and user-accountable certification governance. ● Overcoming Privacy/Safety Dichotomy & Reaching Critical Mass: TRUSTLESS provides unique extreme safeguards for transparently reconciling lawful access and personal confidentiality, which is crucial for legal sustainability of a critical mass of dual-use investments for create a EU-domestic “trustworthy computing base”. 5 The TRUSTLESS Computing Initiative