{"service":"cloakharbor-demo","product":"Cloak Harbor Personal Exposure Defense","domain":"cloak.platphormnews.com","policy":"Web dashboard, public-safe discovery, browser-based operations, trusted-domain discovery, standard route compliance, Vercel metadata capture, trace inspection, and agentic workflow discovery are intentionally supported for public read-only debugging and operator workflows. Mutating, administrative, ingestion, replay, fork, remediation, deployment, sync, test-triggering, reporting, and write actions require PLATPHORM_API_KEY.","posture":"defensive_personal_exposure_defense","dataBoundary":{"demoDefault":"synthetic_only","authorizedRealData":"allowed only when explicitly consented and redacted","forbidden":["unbounded people-search crawling","doxxing","stalking","harassment","impersonation","credential theft","automated external takedown without human approval"]},"auth":{"publicRead":["docs","discovery","health summaries","synthetic demo data","public-safe status"],"protectedActions":["/api/v1/demo/reset","/api/v1/demo/load-fixture","/api/v1/principals","/api/v1/clients","/api/v1/findings","/api/v1/evidence","/api/v1/risk/calculate","/api/v1/kanban/tasks","/api/v1/calendar/events","/api/v1/actions/draft","/api/v1/actions/{id}/approve","/api/v1/actions/{id}/reject","/api/v1/actions/{id}/send","/api/v1/reports/generate","/api/v1/reports/{id}/review","/api/v1/reports/{id}/publish-docs","/api/v1/reports/{id}/export-sheets","/api/v1/reports/{id}/upload-files","/api/v1/reports/{id}/run-browserops","/api/v1/reports/{id}/run-sandbox","/api/v1/integrations/{service}/{action}","/api/v1/capabilities","/api/v1/setup","/api/v1/workloads/self-case","/api/v1/kanban/tasks/{id}/move","/api/v1/loop","/api/v1/webhooks/test","/api/v1/operator/self-case","/api/v1/operator/clients","/api/v1/operator/osint","/api/v1/operator/schedules/osint","/api/v1/operator/schedules/osint/progress","/api/v1/operator/infrastructure/aws","/api/v1/operator/evidence","/api/v1/operator/setup","/api/v1/operator/loop","/api/v1/operator/action-packets/draft","/api/v1/operator/actions/{id}/approve","/api/v1/operator/actions/{id}/reject","/api/v1/operator/actions/{id}/send","/api/v1/operator/kanban/tasks/{id}/move","/api/v1/operator/reports/{id}/{action}"],"acceptedHeaders":["Authorization: Bearer $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: $PLATPHORM_API_KEY"],"clientExposure":"PLATPHORM_API_KEY must never be exposed client-side."},"trustedDomains":{"defaultScope":["*.platphormnews.com"],"blockedByPolicy":["localhost","private IP ranges","link-local IPs","metadata service addresses"]},"trace":{"accepted":["traceparent","tracestate","safe baggage"],"propagated":["X-PlatPhorm-Trace-Id","X-PlatPhorm-Span-Id","X-PlatPhorm-Parent-Span-Id","X-PlatPhorm-Request-Id","X-PlatPhorm-Source-Site","X-PlatPhorm-Target-Site"],"redaction":"secrets, raw IPs, raw x-vercel-ja4-digest, cookies, and request bodies are not exposed publicly."},"updatedAt":"2026-06-27T19:55:34.633Z"}