Private-beta security posture
First Instinct is in private beta. This page describes what is true today. We do not claim audits, certifications or capabilities we have not completed.
The same inputs and policy produce the same decision, so an evaluation can be reproduced.
Every fact in a record is attributed to the party that asserted it.
Actions are deduplicated by intent and idempotency identity; past evaluations can be replayed.
Vendor assertion, receiver decision and Target outcome are attributed separately.
We retain what is needed to reproduce a decision, and no more.
We welcome security reports and will publish a disclosure contact before general availability.
An independent security review is planned. Until it is complete and publishable, we will not describe First Instinct as audited, certified or production-grade.