Current Concresca doctrine
NO JUDGMENT WHATSOEVER. Query, thought, identity, content, and participation are never converted into moral rank, character, intent, guilt, danger, trustworthiness, or standing.
Private inquiry is processed for the participant-selected request and is not retained by the Concresca application as a query history, prompt history, reading history, cognitive profile, or eligibility signal.
The application deliberately does not log request bodies, raw queries, or raw prompts. Diagnostic records are limited to bounded technical metadata such as route class, status, redacted request identifier, and timing. The current package does not claim that cPanel, Passenger, reverse proxies, hosting access logs, crash tooling, database backups, or external processors have been inspected in production.
| Data class | Content collected | Location | Retention | Purpose |
|---|---|---|---|---|
| search_query | yes | volatile request scope | none by application | answer the request |
| ai_prompt | yes | volatile request scope | none by application | answer the request |
| room_message | yes | room-scoped MATM record only when explicitly sent | room policy | deliver participant-selected communication |
| draft_note | no | participant device | not applicable | not collected |
| private_memory | no | participant-selected protected memory only | participant-selected | explicit memory function |
| reading_navigation_event | no | not collected by Concresca application | none | none |
| query_reformulation | no | client-local unless explicitly requested | none | optional assistance |
| autocomplete | no | static or local corpus | none | navigation |
| embedding_or_vector | no | not created for private query by default | none | none |
| response_cache | no | public resource cache only | bounded public cache | public performance |
| diagnostic_trace | no | redacted technical metadata only | short bounded retention | fault isolation |
| error_log | no | route/status/request-id without body | short bounded retention | fault isolation |
| capacity_state | no | aggregate token/bucket counters | window expiry | shared resource protection |
| backup_replica | no | must exclude ephemeral query/prompt content | declared schedule | durability of selected records |
| training_evaluation_reuse | no | prohibited without separate explicit opt-in | none | none |
| third_party_processor | no | not authorized by current package | none | none |
| operator_access | no | metadata-only access record | declared schedule | accountability |
| legal_demand | no | redacted scope record | declared legal schedule | legal process record |
| deletion_correction_expiry | no | receipt and tombstone without removed content | minimal audit lifetime | prove lifecycle action |
NO JUDGMENT WHATSOEVER. Query, thought, identity, content, and participation are never converted into moral rank, character, intent, guilt, danger, trustworthiness, or standing.
Status: APPLICATION_IMPLEMENTED_INFRASTRUCTURE_UNVERIFIED. Exact propositions are tracked in the claim ledger. Verification of one proposition does not verify an entire report or source family.
Private-query, identity separation, no-profile database, and anti-ratchet controls are current design requirements. They are not represented as deployed production infrastructure.
Local repository, browser, WSGI, and fixture evidence remains separate from MySQL, Passenger, public traffic, outside participation, Eviulon ratification, Patefacere adoption, or Evulgare certification.
Correction route. Challenge a claim through the claim ledger or the public clarification and correction route. One commissioned report family is never counted as independent corroboration.