---
title: "Separate source acquisition from interpretation."
description: "The public security model for authorized capture, sealing, parsing, and raw-free delivery into HARBINGER."
updated: "27 August 2026"
availability: "PUBLIC SECURITY MODEL"
candidate_route: "/docs/api/capture-plane"
---

# Separate source acquisition from interpretation.

The public security model for authorized capture, sealing, parsing, and raw-free delivery into HARBINGER.

**PUBLIC SECURITY MODEL:** Capture Plane V2 contract published · Worker, key management, and audit-store deployment pending

## Raw source material does not enter HARBINGER Core

1. **Seal the capture request** — Bind organization, user, purpose, subject, permitted sources, time window, and call budget.
2. **Acquire through an isolated worker** — Collect only approved material and prevent duplicate dispatch or unbounded retry.
3. **Retain raw material only under an approved exception** — Raw source material is not stored by default. Only an expressly approved exception may retain encrypted raw material for up to 24 hours outside the Core and separately from its integrity coordinates; the capture receipt follows the applicable retention policy.
4. **Deliver a raw-free observation candidate** — Pass source, digest, time, state, and bounded structure into HARBINGER Core.

## An operational deployment must pass five isolation checks

These are requirements of the public security model, not a certification that the documentation deployment already satisfies them. Implementation, configuration, recovery, and audit evidence must be verified before a customer environment opens.

- Organization-isolated environments and work queues
- Per-customer encryption and retention boundaries
- Short-lived workload credentials
- Audit coordinates from request through capture, parser, and observation
- Explicit states for denial, failure, duplicate work, and exhausted budget

## Publish trust properties without publishing the attack surface

This page states the boundary a customer needs to evaluate. It does not disclose internal network addresses, storage coordinates, key identifiers, customer source lists, capture schedules, or anti-abuse policy internals.

> **Authority:** The Capture Plane may acquire approved material and issue a receipt. It cannot declare fact, recommend, approve, or execute.

---

Published route: /docs/api/capture-plane