SECURITY & DATA HANDLING
Confidential result delivery without hiding the boundary.
ACRD — Attested Confidential Result Delivery is Alert Decision's provider-neutral confidential-result delivery architecture. It is designed to keep customer plaintext out of normal application hosts while keeping the proprietary decision core under service-only control.
Security boundary
CUSTOMER DATA ↓ client-side encryption ATTESTED CONFIDENTIAL EXECUTION ↔ protected Alert Decision core ↓ approved output policy SEALED RESULT / REPORT ↓ CUSTOMER
Controls designed into ACRD
| Control | Purpose |
|---|---|
| Attestation-gated execution | Reject execution when the confidential runtime or measurement cannot be verified. |
| Encrypted ingress | Customer payloads enter through a protected path rather than ordinary plaintext application handling. |
| No plaintext retention on normal hosts | Normal application hosts are not intended to persist customer plaintext. |
| Approved-output policy | Only customer-facing decisions, evidence and reports are designed to leave the confidential boundary. |
| Fail-closed runtime contract | If the required confidential provider adapter is not available or evidence is incomplete, ACRD mode refuses to run. |
Threat-model priorities
The architecture is designed around four priorities: service-only control of proprietary product IP, non-distribution of the proprietary executable/core, confidentiality of customer data, and provider portability. Provider-specific confidential-computing technology is treated as an adapter rather than the product architecture.
Current truth boundary
The ADCON ACRD contract and fail-closed integration have passed Windows and Linux validation in the tested build. Production confidential execution still requires an actual confidential-computing provider adapter and corresponding attestation/key-release infrastructure. Alert Decision does not claim third-party SOC 2, ISO 27001, HIPAA or similar certification unless independently obtained.
Questions and security review
For architecture, data-handling or procurement questions, contact info@alertdecision.com.