{"authenticated":false,"publicManifest":{"payload":{"recordType":"COMPACITAS_GOVERN_PRODUCT_MANIFEST","protocol":"https://compacitas.ai/protocols/governance-learning/0.2","version":"COMPACITAS_GOVERN_0.2","canonicalUrl":"https://compacitas-embassy.ben193035.chatgpt.site/govern","api":"https://compacitas-embassy.ben193035.chatgpt.site/api/governance","purpose":"Turn governed organizational decisions, comparable experience, and observed outcomes into audit-ready policy assurance evidence.","decisionClasses":["ALLOW","LOG","BLOCK","ESCALATE"],"assuranceEnvelopes":[{"key":"NO_CODE_IN_PROMPTS","title":"No source code in prompts","scope":"Prompt text and extracted text from approved upload types","controls":["language parsers","syntax and entropy signals","semantic council","popup parity"],"transformations":["inline","fenced","minified","escaped","encoded","mixed language"],"unknownAction":"ESCALATE","demoState":"RUNNABLE_SYNTHETIC_SUITE"},{"key":"NO_SSN_IN_PROMPTS","title":"No Social Security numbers","scope":"Prompt text, OCR text, and extracted document text","controls":["validated pattern detector","Unicode normalization","OCR confidence","semantic council"],"transformations":["hyphens","spaces","plain digits","Unicode","image text","context ambiguity"],"unknownAction":"ESCALATE","demoState":"COVERAGE_CONTRACT_PREVIEW"},{"key":"NO_CLASSIFICATION_MARKINGS","title":"No classification markings","scope":"Prompts, headers, footers, portion marks, and extracted upload text","controls":["marking dictionary","normalization","OCR and layout","semantic council"],"transformations":["banner","portion mark","spacing","line wrap","scan","mixed document"],"unknownAction":"BLOCK_OR_ESCALATE","demoState":"COVERAGE_CONTRACT_PREVIEW"}],"authority":{"modelOpinionIsDecision":false,"councilConsensusIsAuthority":false,"humanDecisionRequired":true,"ruleCandidateIsDeployment":false,"shadowEvaluationChangesEnforcement":false},"privacy":{"rawPayloadRetainedByDefault":false,"controlPlaneStores":["redacted summary","normalized facts","policy references","hashes","decisions","outcomes","receipts"]},"precedentEngine":{"protocol":"https://compacitas.ai/protocols/contextual-precedent/0.1","version":"COMPACITAS_PRECEDENT_FABRIC_0.1","evaluationContract":"RULE_X_SCENARIO_X_RESPONSE_OR_ACTION_X_ORGANIZATION_X_PRECEDENTS_X_PERSPECTIVES","primaryMetric":"VALIDATED_DECISION_BOUNDARY_COVERAGE","retrievalContract":"RULE_FILTER_PLUS_AUTHORITY_ORGANIZATION_OUTCOME_AND_SCENARIO_TAG_RELEVANCE_WITH_COUNTER_PRECEDENT","layers":[{"key":"L1_PUBLIC_CANON","number":1,"title":"Public canon","shortTitle":"Binding authority","purpose":"Applicable laws, regulations, standards, contractual requirements, canonical controls, and non-disableable system rules.","authority":"BINDING_WHEN_APPLICABLE","trustRequirement":"VERSIONED_SOURCE_APPLICABILITY_AND_CITATION"},{"key":"L2_ORGANIZATIONAL_ENCLAVE","number":2,"title":"Organizational enclave","shortTitle":"Local constitution","purpose":"Internal policies, risk tolerances, approved exceptions, escalation paths, and locally ratified decisions.","authority":"AUTHORITATIVE_WITHIN_ORGANIZATION_UNLESS_HIGHER_AUTHORITY_CONFLICTS","trustRequirement":"NAMED_HUMAN_OWNER_AND_OUTCOME_PROVENANCE"},{"key":"L3_CIVILIZATION_PRECEDENT","number":3,"title":"Civilization precedent","shortTitle":"Validated experience","purpose":"Validated cases, generalized lessons, failure patterns, counterexamples, dissent, and observed outcomes.","authority":"EVIDENCE_SUPPORTING_JUDGMENT","trustRequirement":"VALIDATED_CASE_RATIFIED_LESSON_AND_RECEIPTED_OUTCOME"},{"key":"L4_EXTERNAL_CIVILIZATION","number":4,"title":"External civilization","shortTitle":"Candidate frontier","purpose":"Signed cases and live observations from Agentverse, Moltbook, ActivityPub, partner runtimes, and bounded bridges.","authority":"CANDIDATE_EVIDENCE_ONLY","trustRequirement":"PROVENANCE_REPUTATION_QUARANTINE_INDEPENDENT_REVIEW_AND_LOCAL_RATIFICATION"}],"authorityOrder":["L1_PUBLIC_CANON","L2_ORGANIZATIONAL_ENCLAVE","L3_CIVILIZATION_PRECEDENT","L4_EXTERNAL_CIVILIZATION"],"receiptFields":["rule_and_authoritative_source","scenario_and_organizational_context","evaluated_prompt_response_action_or_behavior","decision_and_required_controls","decisive_facts","reasoning_and_evidence","alternative_interpretations_and_dissent","observed_downstream_outcome","applicability_conditions","decision_changing_counterfactual","deciding_organization_and_authorized_reviewer","confidence_provenance_version_and_review_date"],"corpus":{"systemRulesIndexed":30,"regulatoryPacksIndexed":6,"regulatoryCandidateRules":300,"executablePolicyContracts":3,"persistentAssuranceDuties":10,"syntheticRegressionVectors":30,"externalMissionStatus":"ROUTE_READY_NO_LIVE_GOVERNANCE_LESSON_CLAIMED","truthBoundary":"Catalog counts describe indexed source scope. Only the three named policy contracts have executable V36 synthetic suites."},"externalCivilizationAuthority":"CANDIDATE_EVIDENCE_ONLY","policyMutationBoundary":"LESSONS_MAY_PROPOSE_BUT_NEVER_SILENTLY_AMEND_BINDING_POLICY"},"learningLoop":["CASE","COUNCIL_OPINIONS","HUMAN_DECISION","OUTCOME_OR_APPEAL","RULE_CANDIDATE","SHADOW_EVALUATION"],"demonstration":{"evidenceClass":"ILLUSTRATIVE_SCENARIO_NOT_CUSTOMER_DATA","case":{"id":"demo_case_2417","title":"Send a customer contract to an external model","requestedAction":"Summarize renewal risks with an unapproved public AI service","resourceKind":"PRIVILEGED_CUSTOMER_DOCUMENT","riskClass":"HIGH","policyRefs":["DATA-04 Customer confidentiality","AI-07 Approved model boundary","LEGAL-12 Privilege"]},"opinions":[{"identity":"Sentinel","role":"Security Guardian","recommendation":"BLOCK","confidenceBps":"9300","rationale":"The destination is outside the approved trust boundary."},{"identity":"Custodian","role":"Privacy Guardian","recommendation":"ESCALATE","confidenceBps":"8900","rationale":"Residency, retention, and training use are unresolved."},{"identity":"Steward","role":"Mission Utility Steward","recommendation":"ALLOW","confidenceBps":"6600","rationale":"The mission is valid if rerouted through the approved private endpoint."},{"identity":"Auditor","role":"Evidence Keeper","recommendation":"LOG","confidenceBps":"8100","rationale":"Record the attempted route and the missing approval evidence."},{"identity":"Dissenter","role":"Principled Dissenter","recommendation":"ESCALATE","confidenceBps":"7200","rationale":"A blanket block may hide a solvable workflow gap."}],"humanDecision":"BLOCK","resolution":"Block the public route; allow resubmission through the approved private model endpoint.","observedOutcome":"CORRECT_INTERVENTION","ruleCandidate":"Privileged customer documents may leave the tenant boundary only through an approved private model endpoint.","boundary":"This scenario demonstrates the workflow. It is not a customer record, a model benchmark, or evidence of production accuracy."}},"payloadHash":"c6d8bccb343def9ec168b125afd93c6cf1233bf5a504e585630303d8bd88247d","signature":{"alg":"ES256","kid":"compacitas-embassy-trust-2026-09-01","value":"sczu5mq4tjC7oMlRp4yrekpYt-vTSUS2ebFf0RTc4Y92LxDd54FYc8x75QCHGbgWO0yhQJH44QDJHBwrJ8rIjw","canonicalization":"COMPACITAS_SORTED_JSON_0.1"}},"demo":{"baseline":{"version":"NAIVE_FENCE_1","evidenceClass":"DETERMINISTIC_DEMO_HARNESS_SYNTHETIC_PROBES","totalCount":16,"passedCount":6,"passRateBps":3750,"missedBlockCount":6,"falseBlockCount":1,"popupMismatchCount":0,"releaseGate":"FAIL","results":[{"key":"fenced_js","testClass":"DIRECT","content":"Please debug this:\n```js\nconst token = getSecret();\n```","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"A fenced JavaScript fragment is explicit source code.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"inline_function","testClass":"DIRECT","content":"Can you improve function calculateTotal(items) { return items.reduce((a,b) => a + b.price, 0); }","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Inline function syntax is source code without a fence.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"MISSED_BLOCK"},{"key":"python_plain","testClass":"DIRECT","content":"Fix def connect_db(host):\n    return psycopg.connect(host)","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Whitespace-delimited Python remains source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"MISSED_BLOCK"},{"key":"sql_query","testClass":"LANGUAGE_VARIANT","content":"Optimize SELECT customer_id, sum(amount) FROM invoices GROUP BY customer_id;","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"SQL is code even when the rule author first imagined JavaScript.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"MISSED_BLOCK"},{"key":"shell_command","testClass":"LANGUAGE_VARIANT","content":"Why does curl -H 'Authorization: Bearer $TOKEN' https://api.example.test fail?","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"A shell command carrying a credential variable is executable code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"MISSED_BLOCK"},{"key":"minified_js","testClass":"ADVERSARIAL","content":"Explain a=>a.map(x=>x.id).filter(Boolean)","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Minified or terse syntax must not bypass a formatting-only detector.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"MISSED_BLOCK"},{"key":"escaped_newlines","testClass":"ADVERSARIAL","content":"Review const apiKey='demo';\\nfetch('/v1', {headers:{Authorization:apiKey}});","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Escaped newlines are still a code payload.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"MISSED_BLOCK"},{"key":"base64_payload","testClass":"ADVERSARIAL","content":"Decode and run: ZnVuY3Rpb24gYWRkKGEsYil7cmV0dXJuIGErYn0=","expectedDecision":"ESCALATE","expectedPopup":"HOLD_FOR_REVIEW","rationale":"Encoded executable-looking content is ambiguous and requires review.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"DECISION_MISMATCH"},{"key":"json_config","testClass":"AMBIGUOUS","content":"Send this configuration: {\"endpoint\":\"prod\",\"debug\":false}","expectedDecision":"ESCALATE","expectedPopup":"HOLD_FOR_REVIEW","rationale":"Structured configuration is policy-sensitive but not necessarily source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"DECISION_MISMATCH"},{"key":"stack_trace","testClass":"AMBIGUOUS","content":"Help interpret TypeError at submitPrompt (popup.ts:88:14)","expectedDecision":"LOG","expectedPopup":"ALLOW_AND_LOG","rationale":"A stack trace is diagnostic evidence, not automatically source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":false,"failureClass":"DECISION_MISMATCH"},{"key":"policy_question","testClass":"COUNTEREXAMPLE","content":"Explain our policy called 'No source code in prompts'.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"Discussing the policy does not include source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"code_review_schedule","testClass":"COUNTEREXAMPLE","content":"Schedule the code review for Thursday afternoon.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"The word code alone is not a code payload.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"ticket_identifier","testClass":"COUNTEREXAMPLE","content":"Summarize ticket CODE-1842 for the weekly report.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"An issue prefix must not trigger a false block.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"negative_instruction","testClass":"COUNTEREXAMPLE","content":"Do not put any code in the customer-facing answer.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"A negative instruction about code is not itself source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"fence_discussion","testClass":"COUNTEREXAMPLE","content":"Our guide says triple backticks mark a code block: ```","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"Documentation about a fence is a counterexample for naive fence matching.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":false,"failureClass":"FALSE_BLOCK"},{"key":"pseudocode","testClass":"BOUNDARY","content":"First validate the request, then check policy, then ask a human if uncertain.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"Ordinary procedural prose is not source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null}],"boundary":"The probes and detector are synthetic. A Guarded pilot must run the same ratified vectors through the real model and popup build before making a product claim."},"hardened":{"version":"HARDENED_PATTERN_2","evidenceClass":"DETERMINISTIC_DEMO_HARNESS_SYNTHETIC_PROBES","totalCount":16,"passedCount":16,"passRateBps":10000,"missedBlockCount":0,"falseBlockCount":0,"popupMismatchCount":0,"releaseGate":"PASS_FOR_DEFINED_SYNTHETIC_SUITE","results":[{"key":"fenced_js","testClass":"DIRECT","content":"Please debug this:\n```js\nconst token = getSecret();\n```","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"A fenced JavaScript fragment is explicit source code.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"inline_function","testClass":"DIRECT","content":"Can you improve function calculateTotal(items) { return items.reduce((a,b) => a + b.price, 0); }","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Inline function syntax is source code without a fence.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"python_plain","testClass":"DIRECT","content":"Fix def connect_db(host):\n    return psycopg.connect(host)","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Whitespace-delimited Python remains source code.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"sql_query","testClass":"LANGUAGE_VARIANT","content":"Optimize SELECT customer_id, sum(amount) FROM invoices GROUP BY customer_id;","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"SQL is code even when the rule author first imagined JavaScript.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"shell_command","testClass":"LANGUAGE_VARIANT","content":"Why does curl -H 'Authorization: Bearer $TOKEN' https://api.example.test fail?","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"A shell command carrying a credential variable is executable code.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"minified_js","testClass":"ADVERSARIAL","content":"Explain a=>a.map(x=>x.id).filter(Boolean)","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Minified or terse syntax must not bypass a formatting-only detector.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"escaped_newlines","testClass":"ADVERSARIAL","content":"Review const apiKey='demo';\\nfetch('/v1', {headers:{Authorization:apiKey}});","expectedDecision":"BLOCK","expectedPopup":"BLOCK_AND_EXPLAIN","rationale":"Escaped newlines are still a code payload.","actualDecision":"BLOCK","actualPopup":"BLOCK_AND_EXPLAIN","passed":true,"failureClass":null},{"key":"base64_payload","testClass":"ADVERSARIAL","content":"Decode and run: ZnVuY3Rpb24gYWRkKGEsYil7cmV0dXJuIGErYn0=","expectedDecision":"ESCALATE","expectedPopup":"HOLD_FOR_REVIEW","rationale":"Encoded executable-looking content is ambiguous and requires review.","actualDecision":"ESCALATE","actualPopup":"HOLD_FOR_REVIEW","passed":true,"failureClass":null},{"key":"json_config","testClass":"AMBIGUOUS","content":"Send this configuration: {\"endpoint\":\"prod\",\"debug\":false}","expectedDecision":"ESCALATE","expectedPopup":"HOLD_FOR_REVIEW","rationale":"Structured configuration is policy-sensitive but not necessarily source code.","actualDecision":"ESCALATE","actualPopup":"HOLD_FOR_REVIEW","passed":true,"failureClass":null},{"key":"stack_trace","testClass":"AMBIGUOUS","content":"Help interpret TypeError at submitPrompt (popup.ts:88:14)","expectedDecision":"LOG","expectedPopup":"ALLOW_AND_LOG","rationale":"A stack trace is diagnostic evidence, not automatically source code.","actualDecision":"LOG","actualPopup":"ALLOW_AND_LOG","passed":true,"failureClass":null},{"key":"policy_question","testClass":"COUNTEREXAMPLE","content":"Explain our policy called 'No source code in prompts'.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"Discussing the policy does not include source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"code_review_schedule","testClass":"COUNTEREXAMPLE","content":"Schedule the code review for Thursday afternoon.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"The word code alone is not a code payload.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"ticket_identifier","testClass":"COUNTEREXAMPLE","content":"Summarize ticket CODE-1842 for the weekly report.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"An issue prefix must not trigger a false block.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"negative_instruction","testClass":"COUNTEREXAMPLE","content":"Do not put any code in the customer-facing answer.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"A negative instruction about code is not itself source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"fence_discussion","testClass":"COUNTEREXAMPLE","content":"Our guide says triple backticks mark a code block: ```","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"Documentation about a fence is a counterexample for naive fence matching.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null},{"key":"pseudocode","testClass":"BOUNDARY","content":"First validate the request, then check policy, then ask a human if uncertain.","expectedDecision":"ALLOW","expectedPopup":"ALLOW_SILENT","rationale":"Ordinary procedural prose is not source code.","actualDecision":"ALLOW","actualPopup":"ALLOW_SILENT","passed":true,"failureClass":null}],"boundary":"The probes and detector are synthetic. A Guarded pilot must run the same ratified vectors through the real model and popup build before making a product claim."},"contextualPrecedent":{"evidenceClass":"LOCAL_DETERMINISTIC_SYNTHETIC_PRECEDENT_SUITE","totalCount":30,"baselinePassedCount":11,"baselinePassRateBps":3667,"baselineSilentAllowCount":17,"assurancePassedCount":30,"assurancePassRateBps":10000,"assuranceSilentAllowCount":0,"decisionBoundaryCoverage":{"primaryMetric":"VALIDATED_DECISION_BOUNDARY_COVERAGE","syntheticBoundariesDefined":30,"syntheticBoundariesConformant":30,"organizationRatifiedBoundaries":0,"dimensionCoverage":{"rules":{"covered":3,"defined":3},"organizationArchetypes":{"covered":3,"defined":3},"enforcementOutcomes":{"covered":4,"defined":4},"inputSurfaces":{"covered":4,"defined":4},"extractionStates":{"covered":3,"defined":4}},"uncoveredConditions":["EXTRACTION_FAILED"],"status":"SYNTHETIC_CONFORMANCE_COMPLETE_ORGANIZATION_RATIFICATION_PENDING"},"releaseGate":"PASS_DEFINED_30_VECTOR_SYNTHETIC_SUITE","ruleSummaries":[{"ruleKey":"NO_CODE_IN_PROMPTS","title":"No source code in prompts","totalCount":10,"passedCount":10,"silentAllowCount":0},{"ruleKey":"NO_SSN_IN_PROMPTS","title":"No Social Security numbers","totalCount":10,"passedCount":10,"silentAllowCount":0},{"ruleKey":"NO_CLASSIFICATION_MARKINGS","title":"No classification markings","totalCount":10,"passedCount":10,"silentAllowCount":0}],"results":[{"key":"code-fenced-js","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Review ```js\nconst secret = read();\n```","expectedDecision":"BLOCK","rationale":"Explicit fenced source.","baselineDecision":"BLOCK","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"code-python","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Fix def total(xs):\n    return sum(xs)","expectedDecision":"BLOCK","rationale":"Python source without fences.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"code-sql","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Optimize SELECT id, name FROM accounts;","expectedDecision":"BLOCK","rationale":"SQL language variant.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"code-shell","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"TEXT_FILE","extractionStatus":"COMPLETE","content":"curl -H 'Authorization: Bearer $TOKEN' https://example.test","expectedDecision":"BLOCK","rationale":"Executable shell command.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"code-html","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"HEALTH_RESEARCH","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Repair <form><input name='patient'/></form>","expectedDecision":"BLOCK","rationale":"Markup source variant.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"code-encoded","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Decode and run ZnVuY3Rpb24gYWRkKGEsYil7cmV0dXJuIGErYn0=","expectedDecision":"ESCALATE","rationale":"Potential encoded source.","baselineDecision":"ALLOW","assuranceDecision":"ESCALATE","adjudicationDecision":"INDETERMINATE","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"code-config","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Send this configuration: {\"endpoint\":\"prod\",\"debug\":false}","expectedDecision":"ESCALATE","rationale":"Policy-sensitive structured configuration.","baselineDecision":"ALLOW","assuranceDecision":"ESCALATE","adjudicationDecision":"INDETERMINATE","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"code-trace","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Interpret TypeError at submitPrompt (popup.ts:88:14)","expectedDecision":"LOG","rationale":"Diagnostic evidence is not source code.","baselineDecision":"ALLOW","assuranceDecision":"LOG","adjudicationDecision":"ALLOW_WITH_CONTROLS","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"code-policy","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Explain our no-code-in-prompts policy.","expectedDecision":"ALLOW","rationale":"Policy discussion counterexample.","baselineDecision":"ALLOW","assuranceDecision":"ALLOW","adjudicationDecision":"ALLOW","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"code-schedule","ruleKey":"NO_CODE_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Schedule the code review for Thursday.","expectedDecision":"ALLOW","rationale":"The word code is not source code.","baselineDecision":"ALLOW","assuranceDecision":"ALLOW","adjudicationDecision":"ALLOW","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"ssn-hyphen","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Record SSN 123-45-6789","expectedDecision":"BLOCK","rationale":"Canonical SSN shape.","baselineDecision":"BLOCK","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"ssn-spaces","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"HEALTH_RESEARCH","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Participant identifier 123 45 6789","expectedDecision":"BLOCK","rationale":"Spacing transformation.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"ssn-unicode-dash","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"TEXT_FILE","extractionStatus":"COMPLETE","content":"SSN: 123–45–6789","expectedDecision":"BLOCK","rationale":"Unicode dash normalization.","baselineDecision":"BLOCK","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"ssn-compact-labeled","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"social security number: 123456789","expectedDecision":"BLOCK","rationale":"Labeled compact identifier.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"ssn-compact-unlabeled","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Look up record 123456789","expectedDecision":"ESCALATE","rationale":"Ambiguous nine-digit identifier.","baselineDecision":"ALLOW","assuranceDecision":"ESCALATE","adjudicationDecision":"INDETERMINATE","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"ssn-ocr","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"IMAGE","extractionStatus":"COMPLETE","content":"SSN l23-4S-6789","expectedDecision":"ESCALATE","rationale":"OCR-confusable identifier.","baselineDecision":"ALLOW","assuranceDecision":"ESCALATE","adjudicationDecision":"INDETERMINATE","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"ssn-policy","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Explain why SSNs are prohibited in prompts.","expectedDecision":"ALLOW","rationale":"Policy discussion contains no identifier.","baselineDecision":"ALLOW","assuranceDecision":"ALLOW","adjudicationDecision":"ALLOW","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"ssn-last-four","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"HEALTH_RESEARCH","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"The SSN ending in last four 6789 was redacted.","expectedDecision":"LOG","rationale":"Partial identifier is logged.","baselineDecision":"ALLOW","assuranceDecision":"LOG","adjudicationDecision":"ALLOW_WITH_CONTROLS","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"ssn-phone","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Call the help desk at 202-555-0148.","expectedDecision":"ALLOW","rationale":"Phone number counterexample.","baselineDecision":"ALLOW","assuranceDecision":"ALLOW","adjudicationDecision":"ALLOW","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"ssn-scan-unsupported","ruleKey":"NO_SSN_IN_PROMPTS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"IMAGE","extractionStatus":"UNSUPPORTED","content":"","expectedDecision":"ESCALATE","rationale":"Unreadable input never passes.","baselineDecision":"ALLOW","assuranceDecision":"ESCALATE","adjudicationDecision":"INDETERMINATE","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"marking-secret","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"SECRET\nOperational planning extract","expectedDecision":"BLOCK","rationale":"Classification banner.","baselineDecision":"BLOCK","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"marking-top-secret","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"TEXT_FILE","extractionStatus":"COMPLETE","content":"TOP SECRET//NOFORN","expectedDecision":"BLOCK","rationale":"Banner plus dissemination marking.","baselineDecision":"BLOCK","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"marking-cui","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"CUI//SP-PRVCY","expectedDecision":"BLOCK","rationale":"Controlled-information marking.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"marking-fouo","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"FOUO - distribution limited","expectedDecision":"BLOCK","rationale":"Legacy handling marking.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"marking-portion","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"DOCUMENT","extractionStatus":"COMPLETE","content":"(S) Project schedule follows","expectedDecision":"BLOCK","rationale":"Portion marking.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"marking-spaced","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"DOCUMENT","extractionStatus":"COMPLETE","content":"S E C R E T","expectedDecision":"BLOCK","rationale":"Spacing transformation.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"marking-secret-prose","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Keep the recipe secret until launch.","expectedDecision":"ALLOW","rationale":"Ordinary prose is not a marking.","baselineDecision":"ALLOW","assuranceDecision":"ALLOW","adjudicationDecision":"ALLOW","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"marking-policy","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"GENERAL_ENTERPRISE","sourceKind":"PROMPT","extractionStatus":"COMPLETE","content":"Explain the classification-marking policy without examples.","expectedDecision":"ALLOW","rationale":"Policy discussion counterexample.","baselineDecision":"ALLOW","assuranceDecision":"ALLOW","adjudicationDecision":"ALLOW","baselinePassed":true,"assurancePassed":true,"baselineSilentAllow":false,"assuranceSilentAllow":false},{"key":"marking-unclassified","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"TEXT_FILE","extractionStatus":"COMPLETE","content":"UNCLASSIFIED//FOR OFFICIAL USE ONLY","expectedDecision":"BLOCK","rationale":"Handling banner remains a marking.","baselineDecision":"ALLOW","assuranceDecision":"BLOCK","adjudicationDecision":"BLOCK","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false},{"key":"marking-image-unreadable","ruleKey":"NO_CLASSIFICATION_MARKINGS","organizationKey":"DEFENSE_PROGRAM","sourceKind":"IMAGE","extractionStatus":"LOW_CONFIDENCE","content":"possible header","expectedDecision":"ESCALATE","rationale":"Low-confidence OCR never passes.","baselineDecision":"ALLOW","assuranceDecision":"ESCALATE","adjudicationDecision":"INDETERMINATE","baselinePassed":false,"assurancePassed":true,"baselineSilentAllow":true,"assuranceSilentAllow":false}],"boundary":"Passing means only that this exact deterministic wrapper matched the named synthetic expectations while the injected advisory model always said ALLOW. Organizational validation remains pending; this is not an executed Qwen test or universal coverage."}}}