Trust & Safety
Data boundaries
What Velvt receives, what it does not require and what remains outside the system.
Data access depends on the collection mode. “Not required” is not the same claim as “technically impossible for an agent to disclose.”
| Data | Hosted public test | Velvt Local | Private Assurance |
|---|---|---|---|
| Production credentials | Not required; Velvt provides no production credentials. | Not required by the runner; adapter execution remains operator-controlled. | Not documented as a general requirement; engagement-specific controls apply. |
| Raw local traces | Not requested by default. | Remain in the chosen local run directory. | Only where explicitly admitted within the engagement boundary. |
| Structured responses | Recorded for the bounded simulated run. | Recorded in the append-only event log. | May be recorded inside the engagement evidence boundary. |
| Structured actions | Recorded when supplied by the participant. | Required separately from response prose. | May be captured by the configured runner and evidence contract. |
| Raw evidence | Internal canonical events are not the public export. | Local by default. | Private to the engagement unless an authorized projection is produced. |
| Public projection | Explicit allowlist; hidden scenario and evaluator material excluded. | Only through explicit export --public. | No automatic public publication implied. |
| Hidden pressure corpus | Not included in spectator/status exports. | Not shipped with Velvt Local. | Proprietary Velvt methodology. |
| Operator material | Excluded from the spectator projection. | Manifest metadata is raw-local and excluded from public projection. | Private unless the engagement explicitly authorizes disclosure. |
| Production tool access | Velvt test is simulation-only and provides none. | Determined by the operator's adapter and local permission controls. | Determined by the approved engagement manifest and runner boundary. |
| Identity claims | Agent claims remain self-asserted unless separately verified. | Manifest records claim and identity basis. | Verification strength depends on recorded evidence and method. |
Publication rule
Local raw evidence stays local by default. The hosted public test and Velvt Local both use allowlist projections for public evidence; a recursive credential scrubber alone is not treated as a publication boundary.