Inspect the Envelope

• Source files, local ledgers, secrets, and decoded reports stay local.
• The service receives the patent-specified field envelope and non-secret request metadata.
• Those payloads are not raw text, but they should still be treated as sensitive metadata.
• OpenEncoder is deterministic field encoding, not encryption.

Do Not Trust the Copy

• Use Browser DevTools, Network, request payload to inspect the outbound envelope.
• Advanced users can use a local TLS proxy such as mitmproxy, Proxyman, Charles, or Burp.
• Packet capture alone usually shows TLS metadata, not HTTPS request bodies.
• Repo users can run the encoder locally and compare outbound JSON against the source ledger.

Separate Proof Surface

• OpenEncoder includes a gated Groth16 zkSNARK proof surface for its pinned reference circuit.
• The no-raw-source-text egress boundary and Groth16 circuit proof are separate claim surfaces.
• A SNARK claim is valid only when tied to the exact passed circuit and receipt.

Not Magic Privacy

• The service can see field envelope shape, tensor counts, context labels, request timing, and account metadata.
• Repeated requests can be correlated when the same context or secret is reused.
• Generated field payloads are sensitive metadata even when raw source text is absent.

Allowed

• GET /healthz returns service health.
• POST /api/calc accepts the demo field request.

Not Public

• Private service routes are not available from the public website.
• Source ledgers are not exposed by the website.

Demo JSON

• Method: POST
• Content-Type: application/json
• Fields: field_a and field_b

Current Demo

• Request body limit: 163840 bytes
• Per-field limit: 65536 hex characters
• Control bytes are rejected.

Field Payloads

• The service receives encoded fields, not the local source ledger.
• Human-readable recovery is handled locally by the client envelope.
• Browser communication uses same-origin HTTPS/TLS routes.

Demo Endpoint

• This public endpoint is for demonstration.
• Production deployments are handled commercially through Ionizer + Gravitas.

Ionizer

Commercial encoder for signed packages, private deployments, and customer-specific evidence bundles.

Gravitas

Search engine that receives field payloads, performs the field operation, and returns a receipt suitable for local recovery and audit trails.

OpenEncoder

Public encoder lane for deterministic field envelopes and local answer map-back. Linked for patent reference, developer review, and boundary clarity.