Public evidence summary
Historical account persistence and callback tests
- Record date
- 30 August 2026
- Scope
- Laboratory or bench evidence; production behavior is not inferred from it.
- Current deployment
- Not independently verified by this historical evidence. Current availability
Recorded result
On 30 August 2026, laboratory checks verified that an account and its session survived a service restart, deletion removed identifying account data while retaining a tombstone, and the deleted account’s session was refused. Altered sign-in callback state created no account. Session-cookie protections were also checked. The login round trip used a test identity provider; Google and GitHub redirect construction was checked without contacting those providers. This is not a live-provider authentication test or proof of document-specific authorization.
The public summary as JSON. These are the same reviewed fields shown in Read.
{
"schemaVersion": 1,
"publicSummaryVersion": "2026-09-30",
"classification": "PUBLIC",
"title": "Historical account persistence and callback tests",
"summary": "On 30 August 2026, laboratory checks verified that an account and its session survived a service restart, deletion removed identifying account data while retaining a tombstone, and the deleted account’s session was refused. Altered sign-in callback state created no account. Session-cookie protections were also checked. The login round trip used a test identity provider; Google and GitHub redirect construction was checked without contacting those providers. This is not a live-provider authentication test or proof of document-specific authorization.",
"date": "30 August 2026",
"scope": "Laboratory or bench evidence; production behavior is not inferred from it.",
"result": "On 30 August 2026, laboratory checks verified that an account and its session survived a service restart, deletion removed identifying account data while retaining a tombstone, and the deleted account’s session was refused. Altered sign-in callback state created no account. Session-cookie protections were also checked. The login round trip used a test identity provider; Google and GitHub redirect construction was checked without contacting those providers. This is not a live-provider authentication test or proof of document-specific authorization.",
"sections": [],
"currentDeployment": "Not independently verified by this historical evidence.",
"canonical": "/evidence/phase-cp-1"
}
Download this public summary
This derivative has its own digest. It is not the original transcript or a new test. Historical original records are preserved privately.
Download public JSON →SHA-256 d46069f772e886b2f75278b0d2e54f9b2e76f107f6772dea0ea0c39d5b38e037