PUBLIC SANDBOXAligned: 2026-03-14

Inspect a bounded Civitas preview run before delivery.

This split-screen surface shows a reviewer-grade preview on the left and deterministic execution posture on the right. It is public, bounded, and browser-local.

No uploads, no server-side processing, and no full reviewer pack exposure. /proof remains the curated trust layer; /verify remains the local integrity companion.

Reviewer / economic buyer view

No drift detected in the preview run

Reviewer-grade preview over a public-safe specimen. Enough for an aha moment and technical credibility, not a substitute for the full reviewer pack.

Verified structure

Current run

Canonical run

Pack identity

PACK-001

Library identity

Vendor Security / CIS Controls v8 family-level mapping

Specimen identity

Canonical public specimen / vendor review sample

Declared scope

Vendor security control assessment

Declared out-of-scope

Penetration testing and red teaming

Public posture

Bounded preview over real artifacts

Verification posture

Verified structure

Representative controls and the artifact sample remain aligned to the canonical public specimen. The surface is real and bounded, not the full reviewer pack.

Browser-local preview runtime

0 network calls / 0 uploads

Artifact posture confirmed

Representative controls

Control

Status

VS-001

Identity / access / MFA posture

Owned access-governance evidence remains readable and tied to the canonical preview record.

Representative control stayed aligned to the canonical preview artifact chain.

Validated in preview

VS-006

Network / TLS / segmentation posture

The bounded reviewer sample points to the same sealed manifest and representative evidence slot.

Manifest, seal, and preview output stay consistent across the bounded run.

Artifact-linked

VS-010

Governance / policy / audit posture

The reviewer-facing decision surface remains legible without exposing the full reviewer pack.

Economic buyers can inspect structure and posture before delivery without opening the full pack.

Readable for review

Representative findings / gaps

VS-030

Preview gap retained

Network segmentation trace retained in the full reviewer pack

The public sandbox proves the artifact slot exists, but the full evidence chain stays outside the bounded preview.

Preview only; the complete remediation trace belongs to delivery artifacts.

VS-045

Reviewer note

Encryption / key-management operating record remains delivery-only

Representative evidence posture is visible, but raw operating records are intentionally withheld from the public surface.

Public-safe preview, not the full evidence inventory.

VS-070

Full pack only

Incident-response tabletop chain remains outside the public shell

A representative finding stays visible so technical reviewers can see boundary without receiving the full artifact layer.

The full reviewer pack contains the complete evidence trace and delivery artifacts.

Sample artifact / output block

DecisionPack.html

Reviewer-facing surface that economic buyers and technical reviewers can inspect directly.

reviewer summary open / stable posture

verify.json

Local verification record for the canonical preview sample.

15 checked entries / no drift detected

DecisionPack.manifest.json

Artifact contract used to anchor the bounded preview.

6 sealed artifacts / schema coherent

Public boundary

This sandbox is a curated public preview. Full reviewer packs contain the complete control mapping, evidence trace, and final delivery artifacts.

Deterministic execution / technical view

Stable, deliberate run log. Local runtime, no network calls, no upload, no remote processing.

Verified structure

Open proof View purchase path

Current run

Canonical run

Result: verified structure, representative controls validated, no drift detected, and execution remained fully browser-local.

Elapsed runtime

148 ms

Checked entries

Sealed artifacts

Network calls

Uploads

Digest posture

no drift

Execution log

Verified structure

Initializing local preview runtime

The bounded shell starts in-browser with no upload and no server-side processing.

ready

Loading canonical preview pack

The public PACK-001 specimen for the Vendor Security library is loaded into the sandbox shell.

ready

Verifying hash / seal / schema posture

Digests and metadata remain coherent; 6 sealed artifacts confirm the preview chain.

ready

Checking representative controls and artifact sample

15 entries are checked against the bounded sample with no drift detected.

ready

Reporting result

Verified structure. No drift detected in the preview run.

ready

Reporting runtime and boundary

Browser-local execution. 0 network calls. 0 uploads. Public preview boundary remains in force.

ready

Where this fits in the trust story

Civitas keeps the roles separate: /proof earns trust, /demo demonstrates operation, /verify confirms local integrity, and the full reviewer pack remains the complete artifact layer.

/proof

The curated trust layer. It explains what Civitas delivers and why the artifacts are verifiable.

/demo

The bounded interactive sandbox. It shows operation shape without exposing the full proprietary corpus.

/verify

The local integrity companion. It confirms on the reviewer machine whether the delivered full pack remains coherent.

Full reviewer pack

The complete artifact layer. It contains the full control mapping, full evidence trace, and final delivery outputs.