no sw
The legal and security audit, through MCP
THIS IS NOT A LEGAL AUDIT, LEGAL ADVICE, OR A COMPLIANCE OPINION, and must not be presented as one. It is a recomputable inventory of legally-relevant FACTS — the inputs a qualified attorney or auditor starts from, never the conclusion. A real legal audit requires licensed counsel reviewing specific jurisdictions against your actual deployment and use; a content-address cannot settle that. Take these facts to qualified counsel.
Run by npm run next on 2026-10-25T22:10:15.436Z through the legal tool: every claim the author makes in this tree sent to the unit's forensic and verification doors, the unit's legal facts and rights beside this tree's licence module, the licence computed for this tree, the prior art of its theorems, due process over the claims, every security door the unit serves, and the tree's own security checks over its sources. Agents: get_legal_facts, get_rights, get_laws, compute_license, compute_prior_art, get_due_process, audit_security, audit_cloudflare, detect_traitors, get_conformance, get_fingerprint, audit_full_anti_fraud, get_guard_lessons, compute_forensics, verify_claim (free-by-default). Recomputable facts, not legal advice: the inputs a qualified attorney starts from, never the conclusion.
Claims: 41; verdicts refused 11, UNVERIFIED 71; violations 0; refusals 19
| Claim | Door | Verdict | Clean | Violations | Receipt | Note or refusal |
|---|---|---|---|---|---|---|
| representation | compute_forensics | — | — | 0 | — | HTTP 500 |
| readme-tests-node-test- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| package-json | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme--mcp-test-ts- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-cross-verification-requests-free-public- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme--random-test-ts- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| perspective-address | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-theorems-declared-accepted-by-the-kernel | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| perspective-discovery | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| author-orcid | verify_claim | UNVERIFIED | — | 0 | 9e47f85b-09d5-8461-8df8-8d3f48dc8bcb | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| zenodo-json | verify_claim | UNVERIFIED | — | 0 | 83619707-7397-853f-a64f-a2f99b98d499 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-tenants | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-lean-4-modules-built-lake-build-lean-4-3 | verify_claim | UNVERIFIED | — | 0 | a11c008e-d4dd-864d-84f8-dc0fc788463a | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme--echo-test-ts- | verify_claim | UNVERIFIED | — | 0 | bd566540-a0b7-81d5-aa24-8859f5d84950 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-mcp-tools | verify_claim | UNVERIFIED | — | 0 | da833b90-e8a4-8c13-8837-ff4d716f38c2 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-self-audit-checks | verify_claim | UNVERIFIED | — | 0 | e120c35c-4730-8fcd-90d1-0ab91c0a9a24 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-reflection | verify_claim | UNVERIFIED | — | 0 | b13b8908-3a03-806a-9b1e-acabf1069da3 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-imagination | verify_claim | UNVERIFIED | — | 0 | 468ff38f-c80f-88c5-a5ab-9c2befffdc8f | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme--cirq-test-ts- | verify_claim | UNVERIFIED | — | 0 | 9b6d98f3-69e9-8f04-8b6e-afa445d6852f | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-harmonic | verify_claim | UNVERIFIED | — | 0 | 8c7d88b8-568c-8a3e-9608-c445b98edec9 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| licence-spdx | compute_forensics | — | — | 0 | — | HTTP 500 |
| readme-tracked-files | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-servers-workers-network-calls-in-the-han | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-type-check-tsc-noemit- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-theorems-using-sorry- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| disclaimer | compute_forensics | — | — | 0 | — | HTTP 500 |
| readme--algorithms-test-ts- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-total | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| perspective-clay | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| perspective-court | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| representation | verify_claim | — | — | 0 | — | HTTP 500 |
| perspective-judge | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-tests-node-test- | verify_claim | UNVERIFIED | — | 0 | 6850227d-f27f-8d7e-8fba-2c42babecf63 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-theorems-declared-accepted-by-the-kernel | verify_claim | UNVERIFIED | — | 0 | f02b034a-ed1d-8b08-afb5-1a2f638d41a5 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| package-json | verify_claim | UNVERIFIED | — | 0 | 2ec9fdd4-c389-8e04-890a-1274cd3f749c | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-cross-verification-requests-free-public- | verify_claim | UNVERIFIED | — | 0 | c7004d44-4123-8d5f-b1f8-d26c5fe4608d | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme--mcp-test-ts- | verify_claim | UNVERIFIED | — | 0 | 68c5aaa7-8ac4-8a7a-9d64-c491ebf55562 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-discovery | verify_claim | UNVERIFIED | — | 0 | c22ef2d1-4339-8da8-9630-a7ebca5e4914 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-address | verify_claim | UNVERIFIED | — | 0 | 29f60b70-ef68-8716-9cb3-76d260a57458 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-tenants | verify_claim | UNVERIFIED | — | 0 | 2caaa4a5-d5bd-81eb-9c53-d21906e6dd49 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme--random-test-ts- | verify_claim | UNVERIFIED | — | 0 | 1aca4384-8370-8804-a868-2c2d38bb76aa | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| licence-address | compute_forensics | — | — | 0 | — | HTTP 500 |
| citation-cff | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-runtime-dependencies | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-axioms-used-by-the-kernel-accepted-theor | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme--processor-test-ts- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-file | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-source-files-under-src-quantum-typescrip | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| perspective-language | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| licence-spdx | verify_claim | — | — | 0 | — | HTTP 500 |
| perspective-database | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| disclaimer | verify_claim | — | — | 0 | — | HTTP 500 |
| readme-theorems-using-sorry- | verify_claim | UNVERIFIED | — | 0 | 54ee77ed-8a05-856b-b182-10eaf65b3784 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-servers-workers-network-calls-in-the-han | verify_claim | UNVERIFIED | — | 0 | a578750d-1178-86e0-ad33-bc16cfb055e4 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme--algorithms-test-ts- | verify_claim | UNVERIFIED | — | 0 | b1dfcc9b-59fe-87c4-8ccd-57a43def4793 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-factorer | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-total | verify_claim | UNVERIFIED | — | 0 | 580f53e4-290d-822c-814f-1180e75d769f | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-tracked-files | verify_claim | UNVERIFIED | — | 0 | d08df0f3-6094-8e82-9a2b-860b2c64ebc6 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-type-check-tsc-noemit- | verify_claim | — | — | 0 | — | HTTP 500 |
| perspective-clay | verify_claim | UNVERIFIED | — | 0 | 41ae9ff3-5c60-8b87-b7e1-44990445f444 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-judge | verify_claim | UNVERIFIED | — | 0 | 3121e3cc-ed7f-8c04-8394-b304f5f32460 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-court | verify_claim | UNVERIFIED | — | 0 | 7186ff10-91aa-8e22-9d31-81d4bd6b4e34 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| author-orcid | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-lean-4-modules-built-lake-build-lean-4-3 | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| zenodo-json | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-mcp-tools | compute_forensics | — | — | 0 | — | HTTP 500 |
| perspective-reflection | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme--cirq-test-ts- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-self-audit-checks | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme--echo-test-ts- | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| licence-address | verify_claim | — | — | 0 | — | HTTP 500 |
| perspective-harmonic | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| readme-source-files-under-src-quantum-typescrip | verify_claim | UNVERIFIED | — | 0 | aa310bb2-01c6-8148-811e-f73e30e0a7ea | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-axioms-used-by-the-kernel-accepted-theor | verify_claim | UNVERIFIED | — | 0 | b1c8a3c7-39f5-89e0-8c97-4578d2ff50a2 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-imagination | compute_forensics | UNVERIFIED | true | 0 | 43192bf8-4c3e-801f-a9a9-79a43ee9609e | Every violation is a recomputable fact about the CLAIM — a fabricated citation, a false address, a drained overclaim — never an accusation of a person. Recheck it from the same ledger and get the same result; a false trial cannot survive re |
| citation-cff | verify_claim | UNVERIFIED | — | 0 | f5e89452-e354-8b41-ba80-420714d09236 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-runtime-dependencies | verify_claim | — | — | 0 | — | HTTP 500 |
| perspective-factorer | verify_claim | UNVERIFIED | — | 0 | ed67a483-bd88-86af-98e7-ecbfc68a8d46 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-language | verify_claim | UNVERIFIED | — | 0 | eec0d059-d788-86bb-be84-e8b20a9a7d04 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme-file | verify_claim | UNVERIFIED | — | 0 | b95ce2d0-57e7-84a9-b23e-887ff9e889a5 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| readme--processor-test-ts- | verify_claim | UNVERIFIED | — | 0 | 6fe4eea2-2809-8fd4-b1df-7f4ac74105e4 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
| perspective-database | verify_claim | UNVERIFIED | — | 0 | 1f784e6a-0094-89bb-a7b1-ab6ad0e9ff76 | no decidable test and no sealed citation — UNVERIFIED; bring a proof to verify it |
Rights and drift
The unit's rights: holder Tsvetan Rouschev (ceccec@psg.bg), CC-BY-NC-ND-4.0, licence address 9ffcda04-5adc-872e-9358-6b831bbd0c0d, imprint 459a7ef3-7a8b-8d8e-893a-099292addcd5, receipt b710135d-26cd-8285-88f0-42d051eaf0c1. No drift against this tree's licence module.
Licence, prior art, due process
Licence computed for this tree: non-commercial, CC-BY-NC-ND-4.0, free true. Prior art: not reached. Due process: guarantees sealed true, 41 on the docket, 41 gaps, 0 traitors.
Security doors of the unit
| Door | Clean | Failed | Receipt | Honest |
|---|---|---|---|---|
| get_guard_lessons | refused: error: the edge does not hold the whole ledger: 40 MB of rows does not fit a 128 | — | — | |
| detect_traitors | refused: error: the edge does not hold the whole ledger: 40 MB of rows does not fit a 128 | — | — | |
| get_conformance | refused: error: the edge does not hold the whole ledger: 40 MB of rows does not fit a 128 | — | — | |
| audit_security | refused: error: the edge does not hold the whole ledger: 40 MB of rows does not fit a 128 | — | — | |
| get_fingerprint | refused: error: the edge does not hold the whole ledger: 40 MB of rows does not fit a 128 | — | — | |
| audit_cloudflare | true | — | 05eca83a-7760-879f-889c-3e2ea6d6be98 | Audits the COMMITTED wrangler.toml posture: no secret/id is committed (TRIAL_KEY is a wrangler secret, KV opt-in), and the crypto is symmetric-only (post-quantu |
| audit_full_anti_fraud | refused: error: the edge does not hold the whole ledger: 40 MB of rows does not fit a 128 | — | — |
This tree's security checks: 10 of 10
| Check | Passed | Evidence |
|---|---|---|
| security:no-live-secret-literal | ✓ | no live Stripe key, webhook secret, AWS key or private key literal in the sources |
| security:tokens-compared-in-constant-time | ✓ | sameToken xors the bytes; no early exit on a mismatch |
| security:signature-compared-in-constant-time | ✓ | the Stripe signature is compared by sameHex, xor over every character |
| security:writes-need-a-role | ✓ | POST needs writer, DELETE needs admin; a reader is refused with the procedure |
| security:tenant-isolation | ✓ | the docket is addressed by tenant, never by a fixed name |
| security:webhook-verified-before-write | ✓ | a webhook is verified before anything is written; a refusal is answered 400 and recorded as a lead |
| security:keys-stay-in-the-worker | ✓ | the handler names no secret; the Worker alone reads env |
| security:cors-headers | ✓ | cross-origin reads allowed, preflight answered |
| security:timeouts-on-outbound | ✓ | every outbound fetch of the Worker carries a timeout |
| security:no-eval | ✓ | no eval, no Function constructor |