Individual records.
Release, check, linking, editing, and deletion operations are scoped to the signed-in account. Owner labels do not grant another person access.
A useful workspace.
An explicit boundary.
Understand what the product processes and which responsibilities remain with the operator.
Protected changes.
Passwords are hashed. Writes require CSRF tokens. Reset links expire in 30 minutes, work once, and invalidate previous authenticated sessions. Signup does not yet verify email ownership.
Portable context.
Export TXT, CSV, and JSON. Remove records or your account. Demo edits stay in local browser storage. Release deletion removes associated checks.
Explicit inputs.
No test is executed and no linked content is fetched. The product does not receive production credentials or connect to a repository, CI/CD, infrastructure, or AI service.
Report a concern.
Email raja@arcweaversystems.net with minimal reproduction details. Do not include secrets or someone else’s private records.
No independent SOC 2, ISO 27001, or other certification is claimed. TLS, hosting, backups, log retention, and mail delivery require operator configuration.