{"ok":true,"schema":"veilos.boundary-census.v1","identity_boundary":"every probe is a synthetic literal; no real actor id, name, or body is read or shown — the census proves each boundary WITHOUT exercising it on anyone real","total_boundaries":7,"active":7,"unbound_count":0,"all_bound":true,"boundaries":[{"key":"actor_id","label":"Raw actor-id boundary","authority":"redactActorFields / publicActorTag (S211 · S221)","guards":"/api/state · /api/orders · /api/quarantine · every actor-keyed projector","closes":"a raw sov:/human: id — whose slug IS the human's callsign — reaching a machine surface","status":"active"},{"key":"denial_receipt","label":"Obelisk denial-receipt boundary","authority":"publicDenialReceiptView (S221 · D-S236.1)","guards":"/api/transparency · /api/quarantine · /verify/:id · /api/state denial receipts","closes":"a crossing actor's raw sov:/human: id on the machine ledger an agent polls to AUDIT the organism (the 9th carrier)","status":"active"},{"key":"held_spam","label":"Held-spam signal boundary","authority":"signalBoundary.isHeldSignal (S214)","guards":"/api/state · /api/hive/lessons · /imprint/feed.json · /collaborate · /ledger · the feeds","closes":"a gate-rejected or quarantined spam signal's free-typed name + body reaching the Record","status":"active"},{"key":"contribution_feed","label":"Contribution feed boundary","authority":"publicContributionFeed (S235 · D-S235.1)","guards":"/imprint/feed.json · /collaborate/feed.json","closes":"a signed-in Sovereign's raw id + held-spam contributions on the polled machine feed","status":"active"},{"key":"whisper_archive","label":"Whisper archive boundary","authority":"isPublicArchiveEvent (S203)","guards":"/api/state archiveEvents · the chronicle + pulse feeds","closes":"a Steward-eyes-only whisper event crossing a public timeline","status":"active"},{"key":"whisper_receipt","label":"Whisper receipt boundary","authority":"publicReceiptView / isWhisperLinkedReceipt (S204)","guards":"/receipt/:id · its Atom feed · /passport · /api/state receipts","closes":"a whisper signal's Steward note copied onto its public receipt","status":"active"},{"key":"confluence_slug","label":"Confluence slug boundary","authority":"redactActorFields roots/confluence_key strip (S225 · S229)","guards":"/api/state imprints + archive events · the due feed","closes":"two conveners' crossing callsigns (bare slugRoots) deanonymized on a confluence surface","status":"active"}],"principle":"A privacy boundary that exists in code but is unbound at one projector is the organism's single most recurring leak. This census re-proves each boundary live by running its real predicate on a synthetic probe: a boundary reads `active` only when the redaction just happened, so a regression surfaces here — publicly, out loud — before it becomes a leak.","proof":{"human":"/boundaries","machine":"/api/boundaries"}}