{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Deleted credentials stay unreadable in the tested backup",
  "summary": "The credential-erasure record dated 8 September 2026 reports three passing hosted test assertions. A database backup recovered the test credential before account deletion but could not afterward, even with the master key retained. A negative control confirmed that destroying the account key was necessary. The base test required older entries to be rewritten; an appended production section dated 7 September reports migrating and verifying all four existing entries. Erasure protection depends on keeping account keys outside the database backup set. The record does not establish later deployments or independent copies of those keys.",
  "date": "8 September 2026",
  "scope": "Historical record; any production observation is limited to the dated test described below.",
  "result": "The credential-erasure record dated 8 September 2026 reports three passing hosted test assertions. A database backup recovered the test credential before account deletion but could not afterward, even with the master key retained. A negative control confirmed that destroying the account key was necessary. The base test required older entries to be rewritten; an appended production section dated 7 September reports migrating and verifying all four existing entries. Erasure protection depends on keeping account keys outside the database backup set. The record does not establish later deployments or independent copies of those keys.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-er-1d"
}