Security by design

Any error, timeout, or ambiguity results in BLOCK. The system never silently allows an action it cannot verify.

Verdicts only move toward stricter enforcement during evaluation. A green verdict can become amber or red, never the reverse.

Identical inputs produce identical verdicts across every run. No sampling, no randomness, no stochastic decision paths.

The core evaluation engine has zero external runtime dependencies. It operates without network calls, LLM APIs, or third-party services.

Every identifier is HMAC-hashed with per-tenant keys before storage. Zero PII in logs, evidence, or API responses.

Every verdict produces a cryptographically signed evidence packet. The integrity chain is append-only and mutations are detectable.