{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Credential erasure protection enabled in production",
  "summary": "The production record dated 8 September 2026 reports enablement on 7 September. Its single assertion passed: all four existing credential entries were migrated to per-account protection and verified to require their account keys rather than the master key alone; a live model request still succeeded. This supports the reported migration at that time. Credential erasure depends on keeping account keys outside the database backup set. The record does not certify later entries, later deployments or independent copies of key material.",
  "date": "8 September 2026",
  "scope": "Historical record; any production observation is limited to the dated test described below.",
  "result": "The production record dated 8 September 2026 reports enablement on 7 September. Its single assertion passed: all four existing credential entries were migrated to per-account protection and verified to require their account keys rather than the master key alone; a live model request still succeeded. This supports the reported migration at that time. Credential erasure depends on keeping account keys outside the database backup set. The record does not certify later entries, later deployments or independent copies of key material.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-er-1d-prod"
}