statecraft.
Catalog/wire-witness

003-redaction-custody-and-retention

Redaction, custody, and retention

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Defines metadata-only default retention, explicit content capture, mandatory credential removal before durable writes, per-attempt custody, 0600 outputs, and a fresh memory-only CA private key for every capture attempt.

Read the full pinned specification ↗

Relationships

Claimed units

  • establishes
    {
  "anchor": "redaction-custody-and-retention",
  "file": "crates/wire-witness-core/src/custody.rs",
  "kind": "section"
}

Source headings

  1. 003: Redaction, custody, and retention
  2. 1. Purpose
  3. 2. Territory
  4. 3. Behavior
  5. 3.1 Retention modes
  6. 3.2 Redaction before custody
  7. 3.3 Durable custody
  8. 3.4 Ephemeral CA custody
  9. 4. Observable negative cases
  10. 5. Out of scope
  11. Verification

Frozen anchors

No frozen anchors declared.