Provider-key isolation and safe refusal without a key

The public summary as JSON. These are the same reviewed fields shown in Read.

{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Provider-key isolation and safe refusal without a key",
  "summary": "On 30 August 2026, a hosted-service test used a fixture credential and a simulated provider. The session completed its request using the account’s supplied key, the inspected logs and stored records contained no plaintext copy, and a session without a usable key was refused. A negative control confirmed refusal when the key could not be decrypted. Assertions were appended on 6 September 2026. This record did not make a live provider call and does not establish that arbitrary credentials can never leak.",
  "date": "30 August 2026; 6 September 2026",
  "scope": "Historical evidence; the scope and environment are described in the recorded result.",
  "result": "On 30 August 2026, a hosted-service test used a fixture credential and a simulated provider. The session completed its request using the account’s supplied key, the inspected logs and stored records contained no plaintext copy, and a session without a usable key was refused. A negative control confirmed refusal when the key could not be decrypted. Assertions were appended on 6 September 2026. This record did not make a live provider call and does not establish that arbitrary credentials can never leak.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-az-3b"
}

Download this public summary

This derivative has its own digest. It is not the original transcript or a new test. Historical original records are preserved privately.

Download public JSON →

SHA-256 b1a0f63a324ed0a3a74acc6a4b74281078f38742c354244fc696dbfa3792a364