{
  "reviewed": "2026-09-27",
  "scope": "Narrow, dated synthetic product evidence. No customer or production activity is represented.",
  "browser_smoke": {
    "date": "2026-09-25",
    "ci_run_id": "36080209260",
    "product": "Aona browser plugin built artifact in Chrome",
    "source_revision": "0bd184e56cee1a89716c7c31a64ba0e7ce12ed3a",
    "method": "Hermetic smoke using simulated provider pages and scripted policy replies",
    "checked": [
      "ChatGPT prompt rewrite, unchanged compliant prompt and blocked file drop",
      "Claude completion interception and scripted block",
      "Consumer Copilot WebSocket block and Microsoft 365 Copilot SignalR block"
    ],
    "limits": "No live AI provider, production policy decision or installed customer endpoint. The CI summary marked one panel-wrapper check flaky and skipped live storage parity."
  },
  "file_engine": {
    "date": "2026-09-27",
    "product": "Aona Orbital Files Edge offline redaction",
    "source_revision": "013b7e9cd3a6e86356f9d41561012f9a6bd4276a",
    "focused_tests": "19 of 19 passed",
    "fixture_source_revision": "aona-knowledge 94ae2a1334188d0a1937b9969dc9b0c7c2a9c57c",
    "fixture": "Fictional customer-service record with Example and Sample names, example.invalid addresses, TEST-PHONE markers and ORDER-EXAMPLE-42. Plain-colon title; XLSX landscape print fits one page.",
    "method": "The caller supplied seven exact search and replacement values. The engine transformed each native file and the saved results were reopened and visually inspected.",
    "observed": "All three formats returned no failure and no warnings. DOCX and XLSX re-extraction found none of the seven supplied source values. For the image-only PDF, all seven expected sensitive spans were visibly masked in a full-page render; an empty text layer was not used alone as absence proof. The unrelated order reference remained visible.",
    "limits": [
      "No sensitive-data detection, configured policy, browser upload or production API was exercised.",
      "The offline PDF output is image-only and has no selectable or searchable text layer.",
      "An earlier offline XLSX fixture with an em dash displayed its numeric character code as visible text after redaction. This colon fixture avoids that input and does not establish general character fidelity.",
      "The production API uses separate Excel and PDF paths. Their behavior is not established by these files."
    ]
  },
  "files": [
    {
      "format": "DOCX",
      "original": "synthetic-customer-record-original.docx",
      "original_sha256": "ee894d3ffaced461b5fd2890e91227359e0ed082a84619cc3e8005570f769bd0",
      "result": "synthetic-customer-record-redacted.docx",
      "result_sha256": "0eed4a322848bfbb0347ff73f34dee5fc6647565a28a63586dab547cdd8a00fa",
      "checked": "Native ZIP CRC and document reparse; headings, table and order reference visible in one-page render"
    },
    {
      "format": "XLSX",
      "original": "synthetic-customer-record-original.xlsx",
      "original_sha256": "1f03ebac0bb1de52d00c7c27c9feebc69758faf08641c3959b4a233c05d203c4",
      "result": "synthetic-customer-record-redacted.xlsx",
      "result_sha256": "13a6dfc396d68385529640020a6e2d11af305f663cac9a4814dfb63b750eb3f5",
      "checked": "Native ZIP CRC and workbook reparse; 13 by 2 cell range, one-page landscape print, summary and order reference visible"
    },
    {
      "format": "PDF",
      "original": "synthetic-customer-record-original.pdf",
      "original_sha256": "aa668e254bd4ff6b082b5965dfa70881d8ca66c0886bb6b459858f883ea65d24",
      "result": "synthetic-customer-record-redacted.pdf",
      "result_sha256": "e1f88c37742192deeb6d51bb96763dda815c366fb11d945d282a09c3bda8fb27",
      "checked": "One A4 page; all seven expected sensitive spans visibly masked in the full-page raster render; order reference readable; resulting text layer empty"
    }
  ],
  "fictional_report": {
    "report": "/evidence/icp/ai-security-reporting/sample-report.html",
    "ledger": "/evidence/icp/ai-security-reporting/synthetic-events.csv",
    "period": "2026-08-11 through 2026-09-09 inclusive",
    "denominator": "20 invented evaluated interactions across two fictional teams",
    "limits": "No product export, observed customer result or compliance conclusion"
  }
}