Security model overview

Audit integrity is described as tamper-evident evidence (hash-chained, signed checkpoints). The architecture is not immutable.

Content-blind by default: raw prompts and responses are not persisted. The Gateway may transiently transport them. Optional inspection modes are separately configured.

Evidence can be stored using write-once object storage / write-once storage where configured.

What we do not claim

What we do not claim: absolute invulnerability, automatic compliance, certification theatre, or that buyers become compliant by purchasing the product.

Provider credentials are protected by the control-plane design. This page does not publish exploitable implementation detail.