Public evidence summary
Historical onboarding and key-vault tests
- Record date
- 30 August 2026
- Scope
- Historical record; any production observation is limited to the dated test described below.
- Current deployment
- Not independently verified by this historical evidence. Current availability
Recorded result
On 30 August 2026, laboratory checks verified that onboarding state survived a restart, stored a fixture provider key in encrypted form and returned only a masked key reference. Cross-account attempts to read or change the vault were refused. The service also refused an unsafe key-storage configuration. The fixture key was deliberately not a real provider credential, and no live provider call was made. The evidence applies to those inspected responses and stores; it does not certify every current production secret-handling path.
The public summary as JSON. These are the same reviewed fields shown in Read.
{
"schemaVersion": 1,
"publicSummaryVersion": "2026-09-30",
"classification": "PUBLIC",
"title": "Historical onboarding and key-vault tests",
"summary": "On 30 August 2026, laboratory checks verified that onboarding state survived a restart, stored a fixture provider key in encrypted form and returned only a masked key reference. Cross-account attempts to read or change the vault were refused. The service also refused an unsafe key-storage configuration. The fixture key was deliberately not a real provider credential, and no live provider call was made. The evidence applies to those inspected responses and stores; it does not certify every current production secret-handling path.",
"date": "30 August 2026",
"scope": "Historical record; any production observation is limited to the dated test described below.",
"result": "On 30 August 2026, laboratory checks verified that onboarding state survived a restart, stored a fixture provider key in encrypted form and returned only a masked key reference. Cross-account attempts to read or change the vault were refused. The service also refused an unsafe key-storage configuration. The fixture key was deliberately not a real provider credential, and no live provider call was made. The evidence applies to those inspected responses and stores; it does not certify every current production secret-handling path.",
"sections": [],
"currentDeployment": "Not independently verified by this historical evidence.",
"canonical": "/evidence/phase-cp-3"
}
Download this public summary
This derivative has its own digest. It is not the original transcript or a new test. Historical original records are preserved privately.
Download public JSON →SHA-256 5b4bad3840840f073027fc67f28bc0eb0d20594319b4abe023d4fbd7b0f79faa