HANTER / IMPERIAL Core — Public Privacy Shield

Status: ACTIVE / FAIL-CLOSED Effective: 2026-08-31

Public identity allowlist

Only the following identity classes may be intentionally published by HANTER:

  • Architect (public title; no personal residence or location inference)
  • HANTER | IMPERIAL Core
  • verified corporate email addresses
  • verified official public websites / public social handles
  • approved project/product names and public technical claims with evidence

Private-by-default data

The following MUST NOT appear in public status endpoints, public Whois when privacy controls exist, X profile, outbound signatures, public repositories, Task Journal views, public evidence summaries or marketing copy unless the Architect explicitly approves a specific disclosure:

  • home / postal / street address
  • city, region, postal code
  • country / current physical location
  • phone / fax
  • date of birth
  • government identifiers
  • private registrant/contact handles
  • personal Gmail or recovery email when a corporate address is available
  • passwords, OTP, CAPTCHA solutions, verification links, API keys, tokens, cookies or session identifiers

Registrar exception

A registrar may require truthful legal/contact data internally. HANTER may transmit the minimum required truthful fields only to that registrar through a bounded owner-verification flow. When a registrar offers a privacy flag, it MUST be enabled. Internal registrar submission != permission to publish the data elsewhere.

For EU.org, the contact is submitted with Private enabled. EU.org describes that flag as not shown in public Whois.

Storage minimization

  • Raw owner address is one-time transit data only.
  • Raw address MUST NOT be stored in Task Journal, canonical memory, public logs, source files or status endpoints.
  • Only a one-way evidence hash and provider response status may be retained.
  • Passwords remain encrypted server secrets and must never be returned by status endpoints.

Public signature

Preferred public signature after corporate email is live:

Architect IMPERIAL Core via HANTER — AI Command Center / Deputy to the Architect

Do not add personal location, residential address, phone, country or legal-name expansion unless a specific approved context requires it.

Truth boundary

PRIVATE_REGISTRAR_DATA != PUBLIC_IDENTITY INTERNAL_REQUIRED_DISCLOSURE != PUBLICATION_AUTHORIZATION PUBLIC_TITLE_ARCHITECT != CLAIM_OF_ANONYMITY_FROM_REQUIRED_SERVICE_PROVIDER