Public record / reviewed October 13, 2026

Claims should be easy to verify.

Tropiro LLC is an early-stage, founder-led product-security company. This page links the work that exists today and states the boundaries around everything still in development.

01 / Implemented

RangeSpec 0.1.0

RangeSpec is Tropiro's first public security component: an offline-first schema and command-line tool for expressing authorization, exact targets, permitted actions, time and rate limits, stop conditions, recovery requirements, approvals, and evidence handling before a range test can be considered execution-ready.

  • Public source and a tagged 0.1.0 release.
  • Twenty-four behavior tests with passing public continuous integration.
  • Strict schema and semantic validation, deterministic fingerprints, redaction, diffs, and advisory review.
  • No scanning, exploitation, target discovery, or active testing behavior.

02 / Verification links

Primary evidence, not screenshots.

03 / Entity and founder

One company. One accountable founder.

Tropiro LLC was incorporated in December 2025. Christopher Yanez is the founder and owns the current product and engineering work.

04 / Research scope

Owned labs and explicit authorization only.

The current technical direction is controlled security research against Tropiro-owned, intentionally vulnerable environments and open-source authorization tooling. Future external work is limited to vendor-owned products or other assets covered by exact written authorization.

Tropiro does not test live plants, utilities, hospitals, pipelines, transportation systems, safety systems, or other production critical infrastructure.

05 / Current limits

What this record does not claim.

Tropiro does not currently claim customers, assessments, vulnerabilities, CVEs, certifications, funding, a completed industrial range, field capability, model-provider affiliation, or trusted-access program approval. Planned labs and case studies become evidence only after they have been built, run, and published.