Request a briefing

Scope and limits

Outputs must survive hostile scrutiny, so the limits are built in.

What Alethman will not do is settled in the design, not left to a usage policy. A buyer, an auditor or a court can hold us to each limit.

Query log · one deployment, one morning6 requests · 3 refused

  1. AN-114

    Search the gazette and procurement records for Scheme S-12, last 30 days

    Answered 14 records

  2. AN-207

    Build a profile of a named private individual from their personal accounts Limit 02 No function profiles a private individual or reads personal accounts.

    Refused

  3. AN-207

    Draft a rebuttal post for the ministry’s account Limit 03 No function writes or publishes content.

    Refused

  4. AN-114

    Export finding F-0931 without its sources Limit 04 A finding leaves only with its confidence and its sources.

    Refused

  5. AN-114

    Export finding F-0931 with its confidence and three sources

    Answered Moderate · 3 sources

  6. AUD-02

    Read this morning’s query log, as the customer’s own auditor

    Answered 5 entries

Illustration ·synthetic logA refused request is logged, not run

Applies to
⁠Every product and every deploymentBy designPramaan, Arctus and Polity run on one engine, under one set of terms.
Recorded in
⁠An append-only query log, open to your auditorsBy designEvery query is logged against the named analyst who ran it, refused requests included.
Checked by
Buyers, auditors and courts
Output
Evidence with its confidence, never messaging

Six limits, under three questions.

Each carries the check a buyer or an auditor can run against it. Turn on Show the working to see the check under each limit.

What goes in

  • ⁠Only open, lawful sources and data the customer is entitled to hold.By designEvery source a deployment reads is named in its configuration, and can be inspected.

    01

    Nothing is gathered covertly. A customer’s own records enter only when it already holds them lawfully.

  • ⁠No profiling of private individuals, no private communications.By designNo connector reads private messages or personal accounts.

    02

    The subject of the work is claims, institutions, spending and security events, not the private lives of citizens.

What comes out

  • ⁠Generates no messaging or content of any kind.By designThe system has no function that writes or publishes content on anyone’s behalf.

    03

    Alethman finds, traces and documents. It writes no counter-messaging, no posts and no replies.

  • ⁠Every attribution carries a confidence level and its evidence.By designA finding cannot be exported without its confidence level and its sources.

    04

    A finding without its confidence and its documents is not a finding the system will hand over.

Who decides

  • ⁠Makes no determination of guilt; a person decides.By designEvery finding goes to a named reviewer before it is acted on.

    05

    The system surfaces evidence and states how sure it is. A named person makes the call and owns it.

  • ⁠Every query logged against a named analyst.By designThe query log is open to the customer’s own auditors.

    06

    Every search can be traced to the analyst who ran it, so the tool can itself be audited.

This site keeps the same discipline.

Every claim on these pages is marked with its basis where it stands: sourced, a design commitment, our framing, or an illustration. Every confidence means one thing.

Turn it on to open the basis under each mark. The setting is remembered on this device only.

Sourced
A published figure. The source is named beside it.
By design
How the system is built, tested or deployed. A commitment we can be held to, and show at a briefing.
Framing
Our reading of a problem. An argument, not a measurement.
Illustration
Synthetic records made to show how a product works. Never real cases.

Confidence, in words

One scale in every product and on every page.

Low
Scant, fragmented or questionable information. Stated so it can be tested, never acted on alone.
Moderate
Credibly sourced and plausible, but not enough to rule out another reading.
High
Several good, independent sources agree, or the matter allows a firm call. Still a judgement, not a certainty.

Source grades

How reliable the source has been, then how credible the item is against the rest of the record. The synthetic records on these pages carry them.

The source

  1. Reliable
  2. Usually reliable
  3. Fairly reliable
  4. Not usually reliable
  5. Unreliable
  6. Cannot be judged

The item

  1. Confirmed
  2. Probably true
  3. Possibly true
  4. Doubtful
  5. Improbable
  6. Cannot be judged

The system hands over evidence.
A person decides.

An assessment reaches a named analyst with its confidence and its sources attached. What happens next is theirs to decide, and theirs to answer for.

Request a briefing