Buhrn Technical Assurance Standard

Current audit

Street Eats 2.0.0, assessed September 28, 2026. This replaces the August 14, 2026 audit.

Buhrn Technical Assessment Shield
Pass shield · no public number on mark

What this check means

This page is the public record that Street Eats checked its security claims against files and test results. The shield stays up only while those files still match. It is a technical honesty check from Buhrn Technologies. It is not a SOC 2 or ISO certificate.

  • Completeness

    All 10 control areas are at their maximum. All 10 launch drills passed. Every one of the 13 test types in this credential is marked done. The pass shield is the result. The perfect 100 is not claimed.

  • Quality of the test

    The number that decides pass or fail is the truth score, 99. A pass needs 97. The publishable score is 98. Twenty-eight file fingerprints are bound to this credential, and the check that the paperwork matches those files is low risk.

  • The system that was checked

    The check covers sign-in, who can see which data, attack tests, the public website, secrets, app defaults, monitoring, load, privacy, and recovery. For 2.0.0, 119 booking attacks on the development database were refused. Event payments use Stripe for catering that happens in the real world. Truck membership stays on the App Store and Google Play.

  • Still open

    One accepted note on a dependency audit keeps the perfect score closed. Booking load at a calm pace passed. On the current database size, the map is the written limit once booking traffic gets much faster.

Truth score99What pass / fail uses · floor 97
Publishable98
Raw domains100/100
Resultpass
Badgepass
Product
Street Eats 2.0.0
Assessed
September 28, 2026
Expires
September 28, 2027
Issuer
Buhrn Technologies LLC · Houston, TX
Launch proofs
10/10
Anti-spoof
low
Bound digests
28
Credential
6cf6e2485e…d3ff9367
Evidence root
ac3ad69fde…c52092ae

Domain scoreboard

Ten control areas. Each bar is points earned out of that area's maximum. All ten are full on this assessment. The formula still names Identity & session first when every area is tied.

  • Identity & session12/12
  • Data isolation16/16
  • Abuse & adversarial10/10
  • Public surface8/8
  • Secrets & supply chain10/10
  • Secure client defaults8/8
  • Observability & vulns10/10
  • Reliability & load8/8
  • Privacy & accessibility10/10
  • Continuity & residual8/8

Launch proofs

Production readiness drills bound into this credential.

  • Chaos / fault injectionL1-chaos-fault
  • Rollback drillL2-rollback-drill
  • Canary / progressive deliveryL3-canary-progressive
  • Backup restoreL4-backup-restore
  • Secret rotation drillL5-secret-rotation
  • Dependency exploit windowL6-dependency-window
  • Abuse-shaped loadL7-abuse-load
  • Kill-switch fail-secureL8-kill-switch
  • Migration dry-runL9-migration-dryrun
  • SLO burn under failureL10-slo-burn-induced

BTAS 1.1 · formula 1.2. Technical honesty only. Remint required after expiry. Not SOC 2, not ISO, not legal advice.

Back to About