Signed custody
HMAC-SHA256 binds the exact redacted payload to an operator-selected key reference without storing the key.
AUTHORIZED EVIDENCE INTAKE
Inspect the infrastructure without collecting the inquiry.
A signed intake turns operator-supplied redacted observations into bounded layer propositions. It rejects raw logs, private paths, addresses, account names, credentials, request targets, queries, bodies, cookies, authorization values, and session identifiers.
LOCAL INTAKE IMPLEMENTED · NO AUTHORIZED INPUT SUPPLIEDJudgment state: NONE
Twenty-one layers, not one privacy badge
Browser, DNS, TLS, proxy, WAF, cPanel, Passenger, WSGI, MATM, five database-log classes, tracing, journals, metrics, backups, provider access, and preservation processes remain separate owners. A missing layer stays NOT_OBSERVED or BLOCKED.
The intake emits proposition-level PASS, PARTIAL, FAIL, NOT_OBSERVED, or BLOCKED findings. It deliberately provides no aggregate score.
Strict schema
Duplicate or unknown fields are refused. Each layer carries owner, evidence source, time basis, limitations, and controlled observations.
Read only
The inspector parses supplied bytes and never changes a server, database, account, Passenger process, cPanel record, or DNS setting.
Correction
A new attributable intake supersedes a prior observation; technical findings never rank a participant.
Canonical machine owner
The complete public contract is available at the infrastructure evidence intake JSON owner. The runtime projection is /api/concresca/infrastructure-evidence-intake.
Production end-to-end privacy remains false until every relevant layer has exact, current, independently scoped operational evidence.
EVIDENCE BOUNDARY
Local mechanism and operational result remain separate.
Implemented locally
Strict signed schema, redaction scanner, twenty-one layer evaluator, 336 layer propositions, mutation tests, and public projection.
Not supplied or observed
No operator-supplied infrastructure payload, production configuration, cPanel, Passenger, WAF, DNS, TLS, provider, or preservation evidence.
Exact blocker
PRODUCTION_INFRASTRUCTURE_PRIVACY = NOT_OBSERVED
No participant judgment
Every technical state has participant evaluation effect NONE and standing effect NONE.
NO JUDGMENT WHATSOEVER. A test, receipt, status code, or configuration finding never becomes moral rank, intent, danger, trustworthiness, worth, consciousness, personhood, or standing.