Security Reference Architecture for Cloud Data Mirrors

Request for comments

Cloud Data Mirror RFC: your data, encrypted with your key, readable only by the AI you approve

Request for comments. Round 1 is open until 11 December 2026, 23:59 UTC.

What this is. A security reference architecture for cloud data mirrors: a private copy of a person’s messages and data that only the readers they choose, including their AI assistants, can search. AJS Consult LLC publishes it for open review.

How to take part

1. Read it. Start with the executive summary.
2. Comment or suggest changes. On any page: select text to comment on it, press Suggest edits to change the wording right on the page and send your changes, or comment at the end of the page. Suggestions and comments made with a GitHub account are credited to it.
3. Follow the review. Updates: sign up by email, use the feed, or watch on GitHub.
4. Found a security problem in the running service? Email aaron@matterboard.ai with SECURITY in the subject. Never post it in a comment.

Round 1
Opens	11 November 2026
Comments close	11 December 2026, 23:59 UTC
Decisions published	By 18 December 2026

Nov 11, 2026 · @aaron soellinger

A request for comments (RFC) on encrypting private data mirrors so that a copy of the stored data is useless on its own, and the data opens only while a device or AI the user approved is making a request.