What the verifier processes
The command-line tool reads collection and environment exports only from paths you provide. The browser demo reads selected JSON files in memory. Neither sends files, request bodies, headers, environment values, or reports to us.
What we collect
Nothing. This v1 ships without analytics, cookies, accounts, telemetry, crash reporting, or server-side storage. The static site may be served with ordinary short-lived infrastructure access logs controlled by the hosting platform.
Redaction boundary
Reports retain artifact paths, request URLs, method names, variable names, scopes, and structural metadata. Variable values are represented as [redacted]. URLs containing inline credentials are redacted. Review generated metadata before sharing it outside your team.
Offline cache
The site uses a service worker to cache its public application shell on your device. It never caches files you select in the demo. Clear the site data in your browser to remove that public cache.
Questions
Open an issue in the project repository for privacy questions or suspected redaction gaps. Do not attach a real collection or secret to a public issue.