Current boundary: local demo state only
As of October 26, 2026, the runnable screens are Next.js client-side demonstrations using fictional VoltEdge records. No external AI/OCR/database/hosting service is verified as connected to these frontend routes, and the local API uses process-memory adapters.
- Runtime model
- STUB No provider or model is configured or verified for the demo UI.
- Data boundary
- IMPLEMENTED Browser-local state; direct API calls remain in-memory and separate.
01 · Inputs
What this demo receives
- Seeded review, registry, and activity records included in the application bundle.
- Button clicks, tab changes, suggestion actions, and other interactions held in React memory while the page is open.
- Text and publication context entered on the /submit route, including locally read UTF-8 .txt files, if a user chooses to run the bounded demo checks.
- An optional confidential marker selected on /submit, which stays with the browser-local review record and does not authorize external processing.
02 · Storage
What is stored
- The overview and review-queue interactions are held in React memory and reset when those screens are refreshed.
- The /submit and /findings flow keeps its content versions, findings, and explicit actions in browser sessionStorage for this tab when available. Refreshing that flow preserves its tab record; an in-memory fallback is used if browser storage is unavailable.
- No frontend route sends those records to a durable database. The separately called local FastAPI foundation uses process-memory adapters whose records disappear when that process stops.
03 · External processing
What leaves the app
The current frontend routes do not send draft content to an external model, hosted OCR/PDF service, Cloudflare project, or storage provider. A backend Gemini adapter and local document-extraction modules are separate integration boundaries; their existence does not prove a live model call from the UI. Provider model, region, retention, and training-use terms must be verified for any connected deployment.
04 · Retention
Retention and deletion
React-only state is discarded on refresh or close. The /submit and /findings sessionStorage record remains for the browser tab session; close the tab or clear this site's browser session storage to remove it. Browser session-restore behavior is controlled by the browser, so this is not a guaranteed timed-deletion policy. Retention rules for a future hosted model, OCR provider, Cloudflare D1/R2 deployment, or production storage system are PLANNED and must be verified before confidential content is accepted.
05 · Runtime inventory
What can receive data in this build
Status labels describe the verified local boundary. IMPLEMENTED means a local path exists; STUB, PLANNED, and MISSING do not mean that a service is receiving demo content.
Browser demo and deterministic checker
Product runtime · browser
- Data received
- Synthetic VoltEdge records, user-entered drafts and publication context, and explicit local clicks, edits, comments, and review actions.
- Retention
- Overview and review-queue state stays in React memory. The /submit and /findings flow uses sessionStorage for this tab when available, with an in-memory fallback.
No runtime model, hosted OCR service, Cloudflare project, or durable database is called by these frontend routes.
FastAPI local foundation
Local API · opt-in from this screen
- Data received
- Organisation-scoped vault and local content-workflow requests when the explicit local development-header mode is enabled from the browser configuration.
- Retention
- The adapter is process-memory only. Its records disappear when the local API process stops.
The default browser demo does not call it; opt-in API failures are shown as errors. This is a verified local contract/RBAC foundation, not durable storage and not a safe destination for confidential production records.
External AI provider
Backend adapter · not called by the UI
- Data received
- None from the current frontend routes. A server-side Gemini adapter is disabled unless environment-only configuration is supplied, and no provider/model call was observed.
- Retention
- No provider request is made by this demo. Model, region, training-use settings, and provider retention remain unverified.
An adapter or environment variable is not evidence that an AI provider is active.
Hosted OCR, PDF, or DOCX service
Document intake · not connected
- Data received
- No hosted extraction service receives data. Default browser-only mode reads UTF-8 .txt locally; explicit local API mode can send bounded PDF, DOCX, PNG, and JPG bytes to the local FastAPI process for dependency-gated extraction.
- Retention
- No hosted extraction retention exists for this build. Future parser/provider behavior must be documented before use.
Local backend parsers and a hosted OCR service are separate boundaries; one does not prove the other is active.
Cloudflare Access, D1, R2, and Queues
Planned durable foundation
- Data received
- None in this build. Wrangler bindings and D1 schema/seed artifacts exist, but no live Access policy, membership lookup, D1 database, R2 bucket, or Queue consumer is connected.
- Retention
- Not applicable because no live Cloudflare resource receives data. Retention and deletion rules remain to be configured and verified.
The planned foundation does not turn the seeded browser demo into an authenticated tenant workspace.
Confidential-material flag
User control · current demo
- Data received
- A browser-local checkbox records that a draft is confidential in the current review record; it is a safety marker, not an identity or consent system.
- Retention
- The marker and draft remain in this tab's sessionStorage when available, with no server-side deletion guarantee. Clear this site's session storage and close the tab if sensitive text was entered.
The local demo makes no external request, but the control does not make this a production-safe confidential workspace. Use fictional VoltEdge material only.
Hosting, analytics, and deployment services
Deployment infrastructure
- Data received
- No hosted deployment or analytics integration has been verified for this local build.
- Retention
- Request-log, region, and analytics retention are unknown until an actual deployment is selected and verified.
Do not infer a live hosting provider, processing region, or retention guarantee from framework files or a local Dockerfile.
06 · User choices
Use the demo safely
Use synthetic or fictional material only.The demo and documentation use fictional VoltEdge records. The confidential-material checkbox is only a browser-local safety marker; there is still no server-side deletion workflow or production confidentiality guarantee. Do not paste customer information, confidential brand sources, credentials, private keys, or other sensitive material into this demonstration.
The default /submit route reads plain-text files locally. With the explicit local API configuration, it can submit bounded PDF, DOCX, and image files to the local FastAPI process; no hosted extraction or durable storage is connected. If sensitive material was entered, clear this site's session storage and close the tab; browser session restore is outside the app's control. If an audit dependency fails, Proofline should show a failed or review-required state rather than a successful-looking result.
07 · Verification provenance
What the local checks actually prove
- The Evidence-or-Abstain report measures 194 synthetic VoltEdge cases through a local deterministic engine and records
external_calls=0. - Those measurements are reproducible implementation checks, not model accuracy, real-world truth, legal compliance, accessibility certification, or production reliability.
- The test wrapper checks the generated section of
docs/EVAL_REPORT.md without rewriting the tracked report. Intentional regeneration is a separate explicit command, and the evaluator refuses secret-like destinations.
08 · Scope
Human review and product limits
- AI-assisted findings, when a verified provider is eventually configured, will be advisory and may be wrong, incomplete, stale, or biased.
- Evidence is expected to come from approved, versioned records; missing evidence is not proof that a claim is false.
- Suggestions are proposals. An authorised human remains responsible for approval, override, or request for changes.
- Proofline is not legal advice, a guarantee of real-world truth, or a complete accessibility certification.