{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Historical account persistence and callback tests",
  "summary": "On 30 August 2026, laboratory checks verified that an account and its session survived a service restart, deletion removed identifying account data while retaining a tombstone, and the deleted account’s session was refused. Altered sign-in callback state created no account. Session-cookie protections were also checked. The login round trip used a test identity provider; Google and GitHub redirect construction was checked without contacting those providers. This is not a live-provider authentication test or proof of document-specific authorization.",
  "date": "30 August 2026",
  "scope": "Laboratory or bench evidence; production behavior is not inferred from it.",
  "result": "On 30 August 2026, laboratory checks verified that an account and its session survived a service restart, deletion removed identifying account data while retaining a tombstone, and the deleted account’s session was refused. Altered sign-in callback state created no account. Session-cookie protections were also checked. The login round trip used a test identity provider; Google and GitHub redirect construction was checked without contacting those providers. This is not a live-provider authentication test or proof of document-specific authorization.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-cp-1"
}