{
  "attestation": {
    "audienceBound": true,
    "processBound": true,
    "protocol": "mythiril.airlock-receipt",
    "purposeBound": true,
    "replayBound": true,
    "ttlMs": 30000
  },
  "endpoint": "/api/airlock",
  "enforcement": "deny-by-default",
  "id": "mythiril.airlock",
  "limitations": [
    "Airlock prevents configured application provider calls; operating-system, browser-extension, crash-dump, and infrastructure access remain outside this proof.",
    "No external provider can be proven unable to infer document content after recognizable document pixels are transmitted, so document-like and uncertain inputs are local-only.",
    "Airlock does not erase copies created before the request or copies retained outside Mythiril."
  ],
  "operationalGuarantees": {
    "approvedExternalPayload": "locally-inspected deterministic metadata-free opaque PNG derivative",
    "credentialMaterialInPolicyDocument": false,
    "documentLikeInputs": "local-only",
    "inspectionFailures": "local-only",
    "maximumAuthorizationUses": 2,
    "maximumProviderPixels": 4194304,
    "protectedPurposes": [
      "redaction-detection",
      "secure-redaction"
    ],
    "providerCallOnPolicyRead": false,
    "sensitiveTextInputs": "local-only",
    "singleAuthorizationMultiProviderFanout": false,
    "uncertainInputs": "local-only"
  },
  "policyDocumentVersion": 1,
  "providerDisclosure": {
    "providerInferencePossible": true,
    "recognizablePixelsMayBeTransmitted": true,
    "statement": "Approved non-document image derivatives may still contain recognizable pixels, and an external provider may infer visible content from those pixels."
  },
  "status": "enforced",
  "version": 1
}