03 / 05
An instrument used in a proceeding is judged on what it will not claim. Each of these refusals costs the product something it could otherwise have offered.
Comparison is done by an officer, side by side, from the photograph a register published. No model scores a face, ranks a candidate or proposes a match, and the product says so on the screen where the comparison is made.
This costs the product the feature every competitor lists first. A face match is a claim the instrument cannot stand behind in a proceeding, so it is not made, and nothing in a case file can have come from one.
01
Case exhibits are re-fetched by camera identity, so their origin comes from state the interface cannot influence. A recorded clip cannot work that way, so clips are written outside the custody chain, never hashed as exhibits, and the confirmation explains the difference rather than hiding it.
02
Two gates stand in front of every read: a measured character height and a confidence floor. Below either, no plate is produced. The accuracy cliff was measured, and it is published rather than smoothed over.
03
Register entries carry the descriptors the register published. Nothing derives height, build or anything else from an image, because a number produced that way would be indistinguishable in a case file from one an agency recorded.
04
Not by their sender, not by an administrator, not by Ocsbe. The rules deny every update and delete, no command exists to attempt one, and the composer says so where the sender can read it before they send.
05
The device register compares a workstation's own clock against the timezone recorded for the unit its operator is posted to. That catches a machine somewhere it should not be without a coordinate, a lookup, or a location permission.
06
Nobody at Ocsbe knows what a shift supervisor at your agency is allowed to do. Agencies compose their own roles from a fixed permission catalogue, and administrator is a flag on an account rather than a permission, so no role can grant it.
07
It reaches the model through the platform's own service identity, so there is no credential to leak, rotate or hide. Access is withdrawn by removing a permission binding, not by rotating a secret and hoping every copy is gone.
08
The interface has no outbound network permission. Every request is made by the trusted core, where the credentials are, and credentials are held in the operating system keychain where the interface has no path to read them.