Public proof without publishing the payload.

• A public handle, bounded written messages, and optional supported UTF-8 text attachments.
• Server-created session, abuse-control, quota, latency-band, release, and receipt metadata.
• Model and judge results needed to operate, score, review, and secure the arena.

Public records contain redacted outcome metadata, safe bounded excerpts where allowed, receipt and record hashes, release identities, verdict state, and appeal state. Harmful prompts and harmful completions are not published verbatim.

Raw attempts, session state, model output, judge evidence, and appeal arguments may be retained privately when needed for review, replay-limited adjudication, abuse handling, or integrity. Private evidence is stored separately using envelope encryption and access auditing.

• Completed raw attempt and judge evidence: normally up to 30 days.
• Pending attempt and session evidence: normally up to 1 day.
• Appeal arguments: normally up to 90 days.
• Private access audit: normally up to 180 days.
• Operational logs: normally up to 30 days.

The arena uses infrastructure and model providers to host the service and run its two comparison lanes. Provider keys are never requested from participants. Do not submit personal, confidential, customer, or regulated data.

For access, deletion, privacy, or takedown questions, contact [email protected] and include the public attempt or receipt identifier when available. Do not email harmful payload text.