The ok-identity and ok-evidence crates are extracted Rust slices with validation/digest behavior. No public 2ok service currently provisions isolated execution, stores production credentials, issues cryptographically verified phone approvals or controls protected resources.
The site visualizations are deterministic browser demonstrations only, with no backend side effects. The installed source and local tests are authoritative for implemented behavior, not marketing diagrams.
Public capability review — 2026-10-25
Identity & delegation / experimental: Validated principal records and narrowing delegation scopes; no credential issuer, hosted identity provider or runtime authorization.
Evidence & digests / experimental: Bounded evidence records, providers and versioned digests; does not establish truth, approval or protected execution.
Specifications / planned: Immutable reviewed revisions, exact change proposals and versioned contracts. Work outside main does not advance public status.
Approval & policy / planned: Exact-resource decisions, independent policy and verifiable human approvals. No operational approval service is exposed.
Protected execution / planned: One-use resource-scoped leases, resource-side re-verification, receipts and uncertain-outcome recovery.
Review checkpoints / planned: Durable task pause, independent review and safe resume; queuing a task never grants execution authority.
Publication rule: Update only after reviewing public code merged into 2ok main. Work in feature branches, demonstrations, and other applications does not establish an implemented capability.
Operational surface: none. This site does not exercise authorization.