{
  "schema": "finetic.operator-evidence.v1",
  "product": "Finetic Operator",
  "release": {
    "version": "0.2.4",
    "releasedAt": "2026-08-04T11:07:20Z",
    "sourceRevision": "bbc0610d6630bdf4b198f61b8e5fa4e06b68b399",
    "imageDigest": "sha256:544d7966221c069715b01db26bd5bba0f23820079c239176db52c50b471560f0",
    "releaseEvidence": "/trust/releases/0.2.4/release-evidence.json"
  },
  "assessment": {
    "kind": "first-party implementation and automated-test evidence",
    "independent": false,
    "observedAt": "2026-08-04T11:46:29Z"
  },
  "controls": {
    "defaultState": "disabled",
    "availability": "requires both explicit enablement and a usable server-side OpenAI credential",
    "modelAccess": {
      "filesystem": "temporary empty working directory with a read-only sandbox",
      "networkTools": "disabled",
      "webSearch": "disabled",
      "approvalPolicy": "never",
      "directFineticTools": false
    },
    "request": {
      "questionMaximumCharacters": 1000,
      "recentMessagesMaximum": 6,
      "operationalAreas": [
        "playback",
        "system health",
        "library activity",
        "jobs and tasks",
        "remote access",
        "backups and updates"
      ],
      "sensitiveFieldRemoval": true,
      "patternBasedTextCleaning": true,
      "completeAdministratorPreflight": false
    },
    "savedConversations": {
      "store": "installation PostgreSQL database",
      "ownerScoped": true,
      "deletable": true,
      "includedInApplicationBackupBoundary": true
    },
    "actions": {
      "confirmationRequired": true,
      "ownerScopedProposal": true,
      "singleClaim": true,
      "schemaAndServerValidation": true,
      "securityAuditEvent": true,
      "types": [
        "run-task",
        "retry-failed-jobs",
        "check-updates",
        "download-update",
        "install-update",
        "create-backup",
        "verify-backups",
        "enable-scheduled-backups",
        "disable-scheduled-backups",
        "run-remote-access-check"
      ]
    },
    "credentials": {
      "browserReadback": false,
      "savedSecretCipher": "AES-256-GCM",
      "savedKeyBytes": 32,
      "ownerOnlyLocalFiles": true,
      "externalEnvironmentSupported": true,
      "permissionCheckedCredentialFileSupported": true,
      "credentialIncludedInPublicArtifacts": false
    }
  },
  "automatedEvidence": [
    "operational snapshot redaction removes identity, media, path, URL and credential fields",
    "bounded history and structured response validation",
    "credential files with group or world access are rejected",
    "web-configured API keys are not present as plaintext in the persisted configuration document",
    "conversations and proposals are scoped to their owning administrator",
    "completed proposals leave the live chat while remaining auditable",
    "Operator remains hidden unless enabled and configured",
    "confirmation is required before an action endpoint accepts a proposal"
  ],
  "limitations": [
    "This is first-party evidence, not an independent security assessment.",
    "The complete generated request cannot yet be previewed before transmission.",
    "Redaction is field- and pattern-based and cannot guarantee removal of every unusual private identifier.",
    "Untrusted diagnostic text that survives redaction may influence an answer, although the model has no direct Finetic tools and every action is confirmation-bound.",
    "OpenAI provider retention and processing are controlled by the administrator's OpenAI project and current OpenAI terms."
  ]
}