TRUST & CUSTODY
Proof before execution.
Identity requires sealed evidence and provider deletion confirmation. Payment, ownership and authorization remain separate receipts. Every run grant binds the exact scope and expires.
Identity custody
- Didit verifies the identity of the person who orders the assessment.
- Approval requires the provider decision and a checked email.
- Evidence is copied and sealed into Cybersive-controlled storage, with its digest and custody recorded.
- Cybersive advances only after evidence is sealed and deletion is confirmed.
Payment
- Airwallex settlement is confirmed by a signed webhook that reaches the engine directly.
- The browser waits for the cleared receipt. Returning from checkout never marks payment as done.
Ownership
- Each engagement receives a unique DNS TXT challenge after payment.
- Ownership is recorded only when two independent resolvers return the matching TXT value.
Run controls
- The engine will revalidate scope, receipts and the time window before issuing a worker-only run grant.
- A worker grant exists only inside the approved window.
- The kill switch stops remaining work at once and records an audit entry.
Data handling
- The site sends no error reports today. If error reporting is added, it will carry fixed fault codes only, never customer data.
- Join pages run no analytics.
- Fonts are served from Cybersive's own origin. No third-party fonts are loaded.
- Private workspace and join pages are never cached and are kept out of search results.
Every step in the workspace shows the receipt the engine recorded, or says plainly that it has not been recorded.
Open workspace