Approval-controlled delivery
Encrypted objects, independent review and signed decisions. Available in either verified visibility mode.
Previously published source remains a public test fixture.Policy-controlled access to protected content, with independent approval and signed decisions.
Sign in to verify repository visibility.
Visibility changes are reviewed in GitHub, not performed by this dashboard. Before publishing, review files and history for protected plaintext. Switching back to private cannot recall downloaded copies. A detected change requires a new inventory request and human review.
Loaded protected-object records and authorised repository history. CLONE token issuance is not proof of clone completion.
| Request / object | Decision | Receipt | Observed |
|---|
Sign in and submit a request, or clear the search.
Only the independent approver can record a decision.
State transitions for the selected protected-object request.
Receipts remain verifiable after access expires.
Single-use delivery. No automatic retries.
Coordinates the six specialists below, combines their findings and highlights concerns for the independent human approver. It cannot approve requests, issue access grants or override a specialist finding.
These classroom checks use explicit rules and supplied evidence, not autonomous live repository scanning. Identity comes from the authenticated workflow; MFA is not asserted. CLEAR means no flags in supplied evidence, not guaranteed safety.
Checks supplied decision-receipt coverage, signature-verification results and links between records for missing or inconsistent evidence. It does not run as one of the six access-review specialists. Dashboard receipt downloads use separate cryptographic signature verification.
Each specialist receives clean evidence, a warning or denial trigger, and expired evidence. Oblivion Prime is checked for human review and blocking. A green card means the checks behaved as expected—not that access was approved.
Not run
| Agent | Scenario | Expected | Actual | Check |
|---|
Local deterministic checks, not live repository scanning or Bedrock. No access requests, decisions or grants are created. The receipt-auditor test supplies an invalid-signature finding; cryptographic verification is separate.
Configuration view · not live service health.
ECDSA SHA-256 · verified locally against the pinned public key.