{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Historical account-isolation test",
  "summary": "On 30 August 2026, a two-account test on hosted hardware verified that each owner could operate its own session and that forged or cross-account attempts to read, attach, checkpoint or resume were refused without changing the target session. The test exercised the engine’s account-ownership boundary using test-generated account assertions. It was not a full end-to-end test of external sign-in or today’s document portal. Legacy laboratory sessions had a separate local-access scope, explicitly outside the owned-session claim.",
  "date": "30 August 2026",
  "scope": "Laboratory or bench evidence; production behavior is not inferred from it.",
  "result": "On 30 August 2026, a two-account test on hosted hardware verified that each owner could operate its own session and that forged or cross-account attempts to read, attach, checkpoint or resume were refused without changing the target session. The test exercised the engine’s account-ownership boundary using test-generated account assertions. It was not a full end-to-end test of external sign-in or today’s document portal. Legacy laboratory sessions had a separate local-access scope, explicitly outside the owned-session claim.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-az-1"
}