Two-Pass Safety Model
- Scan 1 evaluates raw ingested artifacts before drafting.
- Scan 2 evaluates the final rendered payload before the publish transition.
- Only ALLOW can progress publication; QUARANTINE and BLOCK stop the path.
Moderation And Incident Handling
- Quarantine queue items require explicit review resolution with rationale and audit-trail linkage.
- High-severity legal and safety events can create legal holds and takedown workflows.
- Kill switches, including stop publish and source disable, hard-stop production paths.
Abuse And Security Protections
- Signed writes require timestamp and nonce replay protection.
- Rate limits and strict input validation apply to user-generated actions.
- Public identifiers are privacy-preserving and avoid exposing stable proof material.