What Is Bedrock AFT?

An introduction to Bedrock AFT (Assured File Transfer) — a web-based, multi-role approval workflow for moving files between security domains.

Bedrock AFT (Assured File Transfer) is a web application that manages the paperwork, approvals, and accountability around moving files between security domains — the process that, in most organizations, still lives on printed forms, hand-carried signatures, and spreadsheets.

Instead of a paper AFT form, every transfer request moves through a digital workflow where each role reviews, approves, and digitally signs its step. Every state transition is recorded in an immutable history with the signature that authorized it.

Who it's for

Bedrock AFT is built for defense and cleared-industry environments that perform assured file transfers between networks of different classification or trust levels: cross-domain moves, media ingress/egress, and lab-to-lab transfers where a Data Transfer Agent (DTA) physically executes the move and a media custodian tracks the drive it happened on.

What it does

• Multi-role approval workflow — a transfer request passes through requestor, ISSM approval, CPSO review, DTA execution, SME verification, and media custodian disposition. Each step is gated: nothing skips ahead.
• Digital signatures on every transition — signers use their CAC (Common Access Card) where available, or a recorded manual signature otherwise. Signature evidence is stored with the request.
• CAC authentication — the built-in reverse proxy performs TLS client certificate verification, so users can authenticate with their CAC in the browser. Password login is also supported, with STIG-derived password and session policies.
• Out-of-band DAO approval — for high-to-low transfers, the government Designated Approving Authority's wet-signature approval is captured as a server-validated attestation on the request, visible to every downstream signer.
• Media tracking — media custodians maintain an inventory of physical drives, tied to the transfers that used them.
• Complete audit trail — every authentication event and every request state change is logged. History records are immutable.
• Email notifications — optional SMTP integration notifies the next role in the chain when a request reaches their queue.

How it ships

Bedrock AFT is deliberately simple to operate: the entire product is one container — nginx (TLS termination and CAC verification), the application server, and a PostgreSQL database, all supervised inside a single image with one persistent data volume. There is no external database to stand up and no fleet of services to orchestrate, which makes it practical for isolated lab networks.

Licensing & source

Bedrock AFT is licensed under the GNU AGPL — free to run, inspect, and modify. A supported commercial tier may come later; the AGPL core is here to stay.

The source code is public: gitlab.com/foxxcyber-oss/bedrock-aft — issues and contributions welcome there.