{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Historical onboarding and key-vault tests",
  "summary": "On 30 August 2026, laboratory checks verified that onboarding state survived a restart, stored a fixture provider key in encrypted form and returned only a masked key reference. Cross-account attempts to read or change the vault were refused. The service also refused an unsafe key-storage configuration. The fixture key was deliberately not a real provider credential, and no live provider call was made. The evidence applies to those inspected responses and stores; it does not certify every current production secret-handling path.",
  "date": "30 August 2026",
  "scope": "Historical record; any production observation is limited to the dated test described below.",
  "result": "On 30 August 2026, laboratory checks verified that onboarding state survived a restart, stored a fixture provider key in encrypted form and returned only a masked key reference. Cross-account attempts to read or change the vault were refused. The service also refused an unsafe key-storage configuration. The fixture key was deliberately not a real provider credential, and no live provider call was made. The evidence applies to those inspected responses and stores; it does not certify every current production secret-handling path.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-cp-3"
}