PUBLIC SITE SECURITY · strict headers, canonical routing and no public mutation path
External operating evidence remains separate.
Evidence ceiling E3Proof boundary
Trust Center
Security Architecture
Security controls separated by actual assurance boundary.
Control view
What can be stated now.
Statements are bounded to the current public deployment and source-defined architecture.
OWNER-PROTECTED ACCESS · Eval and Validation deny signed-out access
External operating evidence remains separate.
INSTITUTIONAL AUTHORIZATION · tenant and role controls implemented/reference-tested; external customer roles not provisioned
External operating evidence remains separate.
PROTOCOL SECURITY · deterministic hashes, signatures, evidence roots and STOP rules
External operating evidence remains separate.
INDEPENDENT ASSURANCE · not yet established
External operating evidence remains separate.
KNOWN LIMIT · signed-out denial is production behavior, not independent certification
External operating evidence remains separate.