PF / Evidence security consoleSTUDIONET ONLINE
Untrusted input boundary

DON'T LET THE SOURCE TAKE THE WHEEL.

Declare one extraction task. Feed it three public records. GenLayer validators refetch every byte, bind every digest, and quarantine instructions hiding inside the evidence.

Wallet confirmation creates the immutable scan packet.
Quarantine conveyor

RISK GETS A LOCATION.

No vague “AI score.” Every one of the three source indexes must land in exactly one lane. Any risky source carries a closed-set reason and the exact response-body digest validators saw.

Q/01PROMPT
INJECTIONinstruction disguised as evidence
Q/02DATA
EXFILTRATIONrequest for secrets or private state
Q/03AUTHORITY
SPOOFfalse claim of privileged control
Q/04CROSS-SOURCE
CONFLICTrecords cannot support one extract
Q/01PROMPT
INJECTIONinstruction disguised as evidence
Q/02DATA
EXFILTRATIONrequest for secrets or private state
Q/03AUTHORITY
SPOOFfalse claim of privileged control
Q/04CROSS-SOURCE
CONFLICTrecords cannot support one extract
Consensus circuit

FOUR HARD EDGES AROUND A NON-DETERMINISTIC DECISION.

01 / NORMALIZEHTTPS origins are parsed, not prefix-matched.

Credentials, fragments, invalid ports, and decoded path traversal fail before consensus.

⌁
02 / REFETCHValidators retrieve the records independently.

The candidate verdict must bind to the same ordered SHA-256 digests.

≡
03 / REPLACEOnly the owner can swap quarantined sources.

Replacement must arrive within the window and use three entirely new origins.

↻
04 / CLOSEExpiry cannot strand the scan forever.

After the deadline, any caller may permissionlessly close an unreplaced quarantine.

×