fieldwitness/docs/training/emergency-card.md
Aaron D. Lee 490f9d4a1d Rebrand SooSeF to FieldWitness
Complete project rebrand for better positioning in the press freedom
and digital security space. FieldWitness communicates both field
deployment and evidence testimony — appropriate for the target audience
of journalists, NGOs, and human rights organizations.

Rename mapping:
- soosef → fieldwitness (package, CLI, all imports)
- soosef.stegasoo → fieldwitness.stego
- soosef.verisoo → fieldwitness.attest
- ~/.soosef/ → ~/.fwmetadata/ (innocuous data dir name)
- SOOSEF_DATA_DIR → FIELDWITNESS_DATA_DIR
- SoosefConfig → FieldWitnessConfig
- SoosefError → FieldWitnessError

Also includes:
- License switch from MIT to GPL-3.0
- C2PA bridge module (Phase 0-2 MVP): cert.py, export.py, vendor_assertions.py
- README repositioned to lead with provenance/federation, stego backgrounded
- Threat model skeleton at docs/security/threat-model.md
- Planning docs: docs/planning/c2pa-integration.md, docs/planning/gtm-feasibility.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 15:05:13 -04:00

1.9 KiB

Emergency Reference Card

Audience: All FieldWitness users. Print, laminate, and carry in your wallet.


EMERGENCY DATA DESTRUCTION

Option 1: Pull the USB (Tier 1 -- fastest)

Remove the USB stick from the laptop. The laptop retains zero data.

Option 2: Software killswitch

In the browser: Fieldkit > Emergency Purge > type CONFIRM-PURGE > click Purge

From a terminal:

fieldwitness fieldkit purge --confirm CONFIRM-PURGE

Option 3: Hardware button (Raspberry Pi only)

Hold the physical button for 5 seconds.


DESTRUCTION ORDER

The killswitch destroys data in this order (most critical first):

  1. Ed25519 identity keys
  2. AES-256 channel key
  3. Session secrets
  4. User database
  5. Attestation log and chain
  6. Temp files and audit log
  7. Configuration
  8. System logs
  9. All forensic traces (bytecache, pip cache, shell history)
  10. Self-uninstall

On USB: the LUKS encryption header is destroyed instead (faster, more reliable on flash).


DEAD MAN'S SWITCH

If enabled, you must check in before the deadline or all data will be destroyed.

Check in: Browser > Fieldkit > Check In

Or: fieldwitness fieldkit checkin

If you cannot check in, contact your editor. They may be able to disarm it remotely.


KEY CONTACTS

Role Name Contact
Admin _________________ _________________
Editor _________________ _________________
Legal _________________ _________________
Technical support _________________ _________________

Fill in before deploying. Keep this card current.


REMEMBER

  • Pull the USB = zero trace on the laptop
  • Keys are destroyed first = remaining data is useless without them
  • The killswitch cannot be undone
  • Back up your keys regularly -- if the USB is lost, the keys are gone
  • Never share your passphrase, PIN, or LUKS password over unencrypted channels