OrganicMind

Proof

Everything on this page is generated from the results of tests the build runs, and nothing on it is typed in by hand. Each result carries the date it was produced. A section with no result says so — it is never shown as passing because a result is missing, and a test that failed is shown as failed.

This page was generated on .

Mind isolation

A suite of attacks on the boundary between Minds: each tries to reach a memory belonging to a Mind the owner has not connected — through retrieval, ranking, consolidation, export and an operator path — and the suite records whether the boundary held.

No result to show.

No run of the isolation suite is available to this build.

The recovery test

An attempt, from six directions, to recover what an off-the-record session said after it ended. The claim that nothing is kept is made only when this test has run and been published — not before.

No result to show.

The recovery test has not been run. This section will be generated from its result when it exists, and not before.

Deletion, enumerated

Checks against a real store that forgetting removes everything derived from a memory, that the receipt names exactly what was removed and what was kept, and that nothing forgotten can come back. Among them, a property run over a thousand randomly generated sets of derived memories.

No result to show.

No run of the deletion checks is available to this build.

Where your words are sent

The register the system reads before it sends anything to a model provider: which providers, which model families, which regions, what they keep, and what kind of Mind may be sent to them. Read from the running system at the moment shown, not from a list on this page.

No result to show.

The provider register was not read for this build.

What a deletion receipt looks like

An example — not a record of a real deletion — of what you get back after forgetting something: what was removed, kind by kind and by identifier; what was recalculated; what was kept, each with its reason; how long backups take to expire; and whether the record was signed.

Example, with made-up identifiers

{
  "deletion": {
    "id": "8f0c2a1e-5d4b-4c3a-9e2f-1b6d7a8c9e01",
    "scope": {
      "type": "memory",
      "id": "3a9e7c2d-1f4b-4e8a-b6c5-d2e1f0a9b8c7"
    },
    "requested_at": "2026-09-05T14:02:11.408Z",
    "completed_at": "2026-09-05T14:02:12.951Z"
  },
  "status": "completed",
  "removed": {
    "memories": [
      "3a9e7c2d-1f4b-4e8a-b6c5-d2e1f0a9b8c7",
      "5c1d8e3f-2a6b-4f9c-a7d8-e3f2a1b0c9d8"
    ],
    "evidence": [
      "7e2f9a4b-3c8d-4a1e-b9f0-a4b3c2d1e0f9"
    ],
    "connections": [
      "9a3b0c5d-4e7f-4b2a-8c1d-b5c4d3e2f1a0"
    ],
    "beliefs": [],
    "search_entries": [
      "3a9e7c2d-1f4b-4e8a-b6c5-d2e1f0a9b8c7",
      "5c1d8e3f-2a6b-4f9c-a7d8-e3f2a1b0c9d8"
    ]
  },
  "also_removed": [],
  "recalculated": [
    "b4c5d6e7-8f9a-4b0c-9d1e-f2a3b4c5d6e7"
  ],
  "recalculation": {
    "recomputed": 1,
    "bounded": 1,
    "put_out_of_use": [],
    "completed_at": "2026-09-05T14:02:12.702Z"
  },
  "systems": [
    {
      "system": "postgres.memory",
      "status": "completed",
      "short": [],
      "removed": {
        "memories": 2,
        "evidence": 1,
        "connections": 1,
        "beliefs": 0,
        "search_entries": 2
      },
      "completed_at": "2026-09-05T14:02:12.640Z"
    }
  ],
  "kept": {
    "consents": [
      {
        "id": "c0d1e2f3-4a5b-4c6d-8e7f-a8b9c0d1e2f3",
        "scope_type": "mind",
        "scope_id": "d2e3f4a5-6b7c-4d8e-9f0a-b1c2d3e4f5a6",
        "wording_version": "mind.sensitive.2026-08-11",
        "granted_at": "2026-08-30T09:15:42.117Z",
        "withdrawn_at": null,
        "because": "kept: the record that you agreed is the evidence we were permitted to hold this at all (Article 17(3)(e))"
      }
    ],
    "context_manifests": [
      "e4f5a6b7-8c9d-4e0f-a1b2-c3d4e5f6a7b8"
    ],
    "context_manifests_because": "kept: the record of what a past answer drew on, by identifier only; the memory itself is gone",
    "decisions": [],
    "decisions_because": "kept: your decision names, by identifier only, what was in front of you when you took it; the memory itself is gone",
    "audit_events": [
      "f6a7b8c9-0d1e-4f2a-b3c4-d5e6f7a8b9c0"
    ],
    "audit_events_because": "kept: the append-only record that this memory was confirmed, corrected, moved or forgotten, by identifier only",
    "evidence_naming": [],
    "evidence_naming_because": "kept: the memory that replaced this one still records, by identifier only, which memory it replaced; the words themselves are gone"
  },
  "backups": {
    "expire_within_days": 7,
    "statement": "Encrypted backups expire within 7 days."
  },
  "exports_taken": {
    "changed": false,
    "statement": "Exports you have already taken are not changed by this. They are yours."
  },
  "record": {
    "standing": "verified",
    "key_id": "deletion-2026-09",
    "signature": "MEUCIQDf3…example…"
  }
}

The export format

The format of the file you get when you take a copy of everything you own. Published so that what you are handed is portable in fact and not only in claim.

OrganicMind export, format 1. The schema, as a filehttps://organicmind.ai/export-format/1.schema.json

Top-level fields