Content redaction pass — what was excluded and why
Scope: every document under content/, authored in Phase 1 (issue AUD-131).
Date of pass: 2026-10-26.
Sources read for this pass: ../resume_ai_system/plan/EVIDENCE-NOTES.md, ../resume_ai_system/plan/draft-content.md, ../resume_ai_system/plan/20-content-spine.md, ../resume_ai_system/old_projects.md, resume_2025.docx, reference/content-map.md, reference/decisions.md, reference/stack.md, and the Obsidian backup notes.
Acceptance test C6 covers this: no family, address, credential or third-party personal data in pages or corpus. The list below is what was removed to satisfy it, and the reason for each removal.
Excluded — personal identifiers
| Item |
Where it appeared |
Why excluded |
| Date of birth |
resume_2025.docx, Personal Details |
Not needed to assess capability. Age is a discriminator and an identity-theft input. |
| Phone number |
resume_2025.docx, Personal Details |
Publishing a mobile exposes it to scrapers. Sam has not confirmed a phone number belongs on the site (reference/stack.md open items). |
| Street address / suburb |
resume_2025.docx ("live in Ivanhoe"), draft-content.md |
Address-level detail is a safety issue and is irrelevant to the work. "Melbourne based" is the published granularity. |
| Email address |
resume_2025.docx |
Kept off the pages in Phase 1. Contact details are an open decision for Sam; the narrative states the policy rather than the address. |
| Passport and visa status |
resume_2025.docx |
Immigration status is not published. Working rights are a conversation, not a web page. |
| Family names and details |
EVIDENCE-NOTES.md (school portals, children, household) |
Never published. The 2020–2026 period is described as "full-time parent to two children" with no names, ages, schools or locations. |
Excluded — third-party personal data
| Item |
Where it appeared |
Why excluded |
| Names of individual client contacts, agency colleagues and referees |
résumé prose |
No third party has consented to being named. Clients are represented by brand only, which was public campaign work. |
| Details identifying minors in a personal anecdote |
EVIDENCE-NOTES.md interests ("a 2 day hike … with 7 13 year old boys") |
Rewritten as "a group of teenagers in tow". A count of identifiable children is not needed to make the point. |
| Names of household members appearing in automation examples |
EVIDENCE-NOTES.md |
Household automation is described by function (lighting, audio, doors) and never by person. |
Excluded — credentials and infrastructure detail
| Item |
Where it appeared |
Why excluded |
| API keys, tokens, passphrases, secret file names |
n/a — never copied |
Nothing from ~/.config/environment.d/ was read or quoted. No key material enters the repo, per AGENTS.md §4.4. |
| Backup passphrase file path and repository passphrase |
Obsidian backup note |
Publishing the location of a passphrase file is a hint worth withholding. Backups are described by tier, tool and retention only. |
| Hostnames, internal IP addresses, ports-by-host, public DNS names |
reference/stack.md, Obsidian notes, live inspection |
Internal addressing is not needed to judge the platform work. Hosts are described by role ("the runtime host", "the edge host"). |
| Internal service URLs and dashboards |
EVIDENCE-NOTES.md (the pipeline dashboard) |
Described as "a dashboard built to keep track of it". A private URL on a public page is an invitation. |
| Third-party account identifiers, billing detail |
n/a |
Not in the sources and not wanted. |
Excluded — unverifiable or invented content
| Item |
Where it appeared |
Why excluded |
| "42 devices" |
recovered site content |
Explicitly withdrawn in draft-content.md. Not used. |
| "~800ms end-to-end" latency |
recovered site content |
Explicitly withdrawn. Not used. |
| Invented venues, competition results, swell sizes, distances and restaurants |
recovered pursuits content |
Marked ❌ SUSPECT and confirmed as generated. Replaced with one honest line per pursuit. |
| "Diajio" |
recovered client list |
Spelling error for Diageo. Corrected, not carried. |
| Screenshot of the BBC National Archive engagement |
recovered site content |
The work was an internal tool. Described only; no image. |
Metric discipline
Every numeric metric in content/ is traced to a source line, and the trace is recorded per metric in the completion comment on AUD-131. Two figures were deliberately not promoted:
- Businesses: 3 active, 12 cumulative. The site says three are running now and twelve adopted it over time. Conflating them would be the easiest inflation available on this site.
- Where-Woof: deployed, pre-market. The word "commercial" is not used about it anywhere.
Two numbers reported, not smoothed
- Agencies: 22 published, 23 in the summary material. The recovered, verified list holds twenty-two agency names. The published count is the count of the list. If a name is missing, the number rises to twenty-three and the note in
content/history/l3/history-client-wall.md is deleted.
- Period start dates. Where the sources give no start date, the period is anchored on the homelab year (2020) and the page says so. Exact start dates are Sam's to correct.
Open questions for Sam
- Contact details: email only, or also a phone number? (
about-narrative.md states the current policy: email, supplied directly.)
- Is a Melbourne suburb to be published? Currently excluded.
- The missing twenty-third agency, if there is one.