Integrity and independence determine whether research, advice and technology can be reliable. Not because people never have interests, but because those interests must be visible, manageable and subordinate to public values. For LibreKAT this means that choices are testable and are not driven by commercial dependencies that color the outcome in advance.

In information security, integrity also has a technical meaning: data and systems must be correct and must not be changed unnoticed. That meaning fits well with the organizational side. Decision-making must also be honest. Anyone who advises a security measure, points out a vulnerability or assesses a dependency must be able to explain the facts, standards and considerations that underlie it.

Independence is not a pose of aloofness. It is a practical condition for being able to speak honestly. If a research method depends on closed tooling, if a report cannot be traced back to evidence or if a supplier is also the one who assesses itself, trust shifts from control to reputation. That is too poor for public digital infrastructure.

LibreKAT therefore opts for open, controllable and verifiable working methods. A finding must be replicable. A method must be able to be discussed. A conclusion should not be made stronger than the evidence allows. That sometimes makes it less spectacular, but more reliable.

Fundamentals of information security describes the auditor as someone who not only looks at policy, but at design, existence and operation. Intention means that a measure is logically designed. Existence means that it is actually organized. Operation means that it functions consistently and effectively in practice. This three-way division fits exactly with integrity: not just saying what is true, but demonstrating that it is correct.

Integrity also means that we take the difference between intentions and structures seriously. Good intentions of directors, suppliers or developers are valuable, but they are not a guarantee. Ownership, jurisdiction, key management, audit rights and exit options determine what happens when circumstances change. If you want to remain independent, you must organize integrity in the structure.

This also applies to LibreKAT itself. Public values ​​require transparent governance, clear roles and the ability to say no to routes that are substantively indefensible. Independence does not mean that cooperation is suspect. On the contrary: cooperation is necessary. But collaboration must be organized in such a way that no one can hold the content hostage.

Integrity also requires modesty. In complex digital chains, everything is rarely certain. An honest analysis identifies uncertainties, assumptions and remaining risks. That precisely increases trust. Pretending that every risk has been resolved makes the organization vulnerable to false security.

Independence requires sufficient and suitable evidence. Documentation, configurations, log files, interviews and observations are not administrative burden, but the raw material of accountability. Without evidence, integrity becomes dependent on authority. It becomes testable with evidence.

For LibreKAT, integrity is both technical and moral. Data must be reliable. Research must be traceable. Decisions must be explainable. And the foundation must remain independent enough to have the uncomfortable conversation when necessary.

Digital autonomy is only sustainable if it is supported by reliable structures. Integrity and independence are how LibreKAT prevents safety from becoming a sales pitch. It then remains what it should be: a public responsibility.