Architecture & evidence

The dependency map covers one incident: G3, the blast-radius and revocation story. Everything below is proven, separately, against real Google Cloud infrastructure or a fast offline fixture — none of it is re-verified by loading this page. Each row reads its own captured evidence file; a missing or stale file is labeled as such, not hidden.

Core acceptance gates (offline, from scripts/gates.py)

Live capability proofs (Google Cloud, captured separately)

Generated by scripts/render_architecture.py. Run make check for the offline gates and make live-* (see make help) to refresh any live proof. See README.md for the full product-mapping table and DECISIONS.md for the corrections behind each claim_boundary.