Source hierarchy
- Authenticated repository files, history, tests, actions, and deployment evidence
- Real captures from audited local or live applications
- Explicit user confirmation for personal, employment, metric, credential, and date claims
Public-claims control
Every public project statement must map to authenticated repository evidence, a real application capture, or information explicitly confirmed by Paul Warner. Unknowns stay unknown.
Production prelaunch is not live operations. A tested local product can work through MCP or a CLI without a hosted service or graphical interface. A functional prototype is not a deployment, and recovery work is not implemented capability.
Credentials, customer data, sensitive endpoints, and internal configuration are excluded. Intended-private repository source is not linked as portfolio evidence; case studies use only sanitized behavior and control evidence.
Application captures and implemented-architecture schematics are labeled separately. A headless MCP server can be represented by its tested protocol, workflow, and architecture without inventing a graphical screen. Schematics do not count as application captures.
AI assistance is separated from approvals, business decisions, provider activation, payments, messages, and other external effects.
The audit summary counts eight previous repository-repair pull requests separately from later publication work. A green check validates the proposed branch; it does not imply human approval or production release.
Status dictionary