Truth surface model

Six surfaces, six proof meanings.

Each surface says what it proves, what it does not prove, where it lives, what promotes it, and what blocks it.

TEST_VALIDATED_SYNTHETIC_SCOPE CLAIM_FIREWALL

Public inspection layer

source truth separate
runtime truth separate
signal truth separate
evidence truth separate
public proof separate

hawkinsoperations-detections

Source Truth

What it proves
A source artifact exists and can be reviewed.
What it does not prove
Deployment, runtime behavior, signal observation, or public proof.
Promotes by
Reviewable source plus a linked validation path.
Blocked by
Missing source, unclear ownership, or unverifiable lineage.

hawkinsoperations-validation

Validation Truth

What it proves
A deterministic validation process passed inside its stated scope.
What it does not prove
Runtime operation, public signal, or external-use authorization.
Promotes by
Stable validator output linked to the proof ledger.
Blocked by
Non-deterministic checks, missing outputs, or changed claim scope.

hawkinsoperations-platform

Runtime Truth

What it proves
A control or detection is active in a runtime environment.
What it does not prove
Signal observation, evidence linkage, or public-safe proof.
Promotes by
Current runtime evidence with a bounded trust class.
Blocked by
Private-only evidence, stale host state, or unreviewed telemetry.

running systems and validation output

Signal Truth

What it proves
The detection produced a bounded signal in the observed context.
What it does not prove
Fleet scope, production readiness, or public-safe status.
Promotes by
Signal artifacts tied to time, source, and validation records.
Blocked by
No event record, unclear source, or non-public evidence limits.

private evidence vault and hawkinsoperations-proof

Evidence Truth

What it proves
A preserved evidence artifact supports a specific bounded claim.
What it does not prove
Claims outside the evidence boundary.
Promotes by
Explicit linkage, retention, and reviewable proof records.
Blocked by
Unpromoted data, sensitive material, or missing review linkage.

hawkinsoperations-proof and hawkinsoperations-website

Public Proof

What it proves
A public-facing claim has passed the required promotion boundary.
What it does not prove
Private runtime or signal claims not linked into public proof.
Promotes by
Evidence-linked proof records and claim-boundary review.
Blocked by
Blocked terms, missing promotion gates, or website-only rendering.