Local analysis.
Public methods.

Separate by function

Primary artifacts remain in a private evidence store. Project context contains approved guidance, not security truth. Security RAG retrieves case-scoped evidence. Cipher compares bounded observations. The local team reviews supplied packets; it does not operate accounts or approve findings.

The public web source has one job

The Web IPI lab serves fixed static HTML, plain text, and JSON. Visiting it does not launch a model or tool. There is no visitor-authored payload endpoint, credential collection, database connection, or path into the private evidence store.

Offline handoff

A researcher captures source bytes, context, output, and any planner records separately. The offline harness compares exact markers and emits a bounded packet for Cipher review. Real-product testing and publication remain separate actions.