This page is the operator's restraint surface. It tells you the perimeter is alive and disciplined. It does not tell you anything that would help an attacker — see /legal and docs/domain/PUBLIC_STATUS_POLICY.md in the repo for the policy.
Installed (dry-run by default; live benchmark pending).
RU-ROI floor: 3.0. No 1-token perfect run scores "exceptional."
Every trace is SHA-256 anchored.
What this page does not say
It does not name the registrar, the DNS provider, the mail provider, the origin host, or any private namespace. It does not surface CT alerts, drift findings, incident details, or canary routes. That information lives behind authenticated control planes that are disabled by default.