Deletion fails closed when erasure cannot be confirmed

The public summary as JSON. These are the same reviewed fields shown in Read.

{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Deletion fails closed when erasure cannot be confirmed",
  "summary": "On 7 September 2026, four assertions passed using production binaries with disposable data. The customer deletion path removed credentials and made checkpoint data unrecoverable through the tested backup-recovery path. It did not report deletion if key destruction could not be confirmed. A second tenant remained restorable. Production services were not changed by this test; it exercised their deletion code in isolation. Recovery protection depends on keys being excluded from the restored backup.",
  "date": "7 September 2026",
  "scope": "Historical record; any production observation is limited to the dated test described below.",
  "result": "On 7 September 2026, four assertions passed using production binaries with disposable data. The customer deletion path removed credentials and made checkpoint data unrecoverable through the tested backup-recovery path. It did not report deletion if key destruction could not be confirmed. A second tenant remained restorable. Production services were not changed by this test; it exercised their deletion code in isolation. Recovery protection depends on keys being excluded from the restored backup.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-er-1c"
}

Download this public summary

This derivative has its own digest. It is not the original transcript or a new test. Historical original records are preserved privately.

Download public JSON →

SHA-256 09d74e2b1a816de75bcca80dac66623a99b60bfd0d841d520089397bac1560b1