What is proven—and what is not

Verified locally

Publication gates

• Complete public deployment and live readback for the https://opencontinuity.org namespace.
• Adopt specification and code licenses, contribution/IPR terms, neutral governance, and vulnerability response.
• Complete public review, resolve material issues, and reproduce the release on the pinned toolchain.
• Publish immutable release members, digests, and the public hostile corpus.

Implementation and interoperability gates

• Identify two independent provider adapters, two independent OCP providers, and one independent client.
• Run real, non-personal provider exports through quarantine and declared mapping.
• Demonstrate cross-provider transfer, re-export, semantic graph comparison, and explicit loss handling.
• Demonstrate managed-byte retrievability, re-verification, source loss, changed identifiers/URLs, and recovery.
• Achieve matching graph, custody, mapping, loss, and comparator results across independent languages and codebases.

Security gates

• Exercise hostile archives and portable content against deployed isolated parsers and application control boundaries.
• Complete independent threat and security review for all three Portable AI History profile families.
• Register and test remote and offline authenticity, confidentiality, recipient, and client-instance binding profiles.
• Exercise credential, network denial, resource-limit, supply-chain, recovery, and external-action boundaries in real deployments.