Method / evidence chain

A repeatable review, with limits attached.

01 / AUTHORIZE

Prove control before recurring review

Setup records the requester, organization, authority attestation, target, and verification method. Production verification uses DNS, a well-known file, or a constrained connector handshake.

02 / CAPTURE

Discover and preserve eligible public content

The job normalizes the target, enforces network-safety policy, records access behavior, discovers in-scope URLs, renders eligible content, and stores evidence with timestamps and content hashes.

03 / EVALUATE

Apply a fixed rule and source set

Each job pins its rules, source library, capture settings, and software version. Candidate issues identify quoted evidence, source class, rationale, uncertainty, and known counter-signals.

04 / REVIEW

Human disposition where promised

Candidate issues may be released, suppressed, escalated, disputed, or withdrawn. The record shows who changed the disposition, when, and why.

05 / REPORTING

A score is a summary—not the product truth

Any released score must disclose its formula, weights, excluded modules, data sufficiency, confidence, and comparison limits. Severe unresolved issues cannot be averaged away.

Never display a certification signal.

No approved badge, legal-compliance label, provider-acceptance promise, or unqualified pass/fail state is permitted.

06 / VALIDATION

Measure misses, not only matches

Maintain a labeled test set, double-review samples, measure precision and recall by rule family, test adversarial wording, verify capture completeness, and publish known limitations.