telemetry-leak-labIX / SECURITY ENGINEERING

Reproducible experiments · v0.1.0

Redacted does not mean gone.

Synthetic inputs. Executed checks. Explicit failure states. This report describes the configured experiments; it is not a security certification.

incomplete redaction

LEAK

Known canary material remains after processing.

Inspect sanitized evidence
{
  "experiment": "incomplete redaction",
  "verdict": "LEAK",
  "summary": "Known canary material remains after processing.",
  "known_canaries": 2,
  "missing_baseline": [],
  "failed_controls": [],
  "findings": [
    {
      "canary": "patient",
      "encoding": "sha256",
      "location": "$/k1/[0]/k1/k0"
    }
  ],
  "scope": "Known variants in parsed JSON only; absence is not proof that all sensitive data is removed."
}

configured redaction

PASS

All known canaries were observed before, absent after, and configured controls survived.

Inspect sanitized evidence
{
  "experiment": "configured redaction",
  "verdict": "PASS",
  "summary": "All known canaries were observed before, absent after, and configured controls survived.",
  "known_canaries": 2,
  "missing_baseline": [],
  "failed_controls": [],
  "findings": [],
  "scope": "Known variants in parsed JSON only; absence is not proof that all sensitive data is removed."
}

dropped useful telemetry

INCONCLUSIVE

Baseline or preservation controls did not establish a measurable experiment.

Inspect sanitized evidence
{
  "experiment": "dropped useful telemetry",
  "verdict": "INCONCLUSIVE",
  "summary": "Baseline or preservation controls did not establish a measurable experiment.",
  "known_canaries": 2,
  "missing_baseline": [],
  "failed_controls": [
    {
      "control": 1,
      "phase": "after"
    }
  ],
  "findings": [],
  "scope": "Known variants in parsed JSON only; absence is not proof that all sensitive data is removed."
}
Report integrity

SHA-256 of the indented JSON payload, without its final newline:

18840767a93ed49de9b5d9335aad1c3f197196fe879588330ec78b78d79fa605