Files
ai-resume/docs/content-redaction.md
Documenter 00fa15f98f Phase 1: content source of truth — 40 documents across six areas
Satisfies the Phase 1 Definition of Done:

- content/ validates cleanly against the frozen schema. `make validate`
  reports OK: 40 document(s) validated, 0 violations.
- Six areas exist, each with an L1 entry: ai-overview, platform-overview,
  edge-overview, products-overview, history-overview, about-overview.
- All six areas have an L2 entry: ai-systems, platform-estate, edge-fleet,
  products-business, history-engagements, about-narrative.
- 28 L3 artefact stubs under content/<area>/l3/. Every artefacts[].url in
  every document resolves to one of them; the validator proves there are no
  dangling references (and a deliberately broken copy exits 1).
- Every metric value traces to a source line in the evidence notes or the
  approved metric set in reference/content-map.md (per-metric citations are
  recorded in the AUD-131 completion comment).
- Every document carries confidence and last_verified=2026-10-26; the
  validator rejects a missing or non-canonical value.
- docs/content-redaction.md records the redaction pass: identifiers, third
  party personal data, credentials and infrastructure detail excluded, with
  reasons, plus the two numbers that are reported rather than smoothed.

Honesty positions held: 3 businesses active (12 adoptions over time),
Where-Woof deployed and pre-market, failures kept in (edge-failures), no
promotion of in-progress work to delivered.

No site code, no templates, no CSS, no rendering (Phase 2).
2026-10-26 17:30:35 +11:00

5.6 KiB
Raw Blame History

Content redaction pass — what was excluded and why

Scope: every document under content/, authored in Phase 1 (issue AUD-131). Date of pass: 2026-10-26. Sources read for this pass: ../resume_ai_system/plan/EVIDENCE-NOTES.md, ../resume_ai_system/plan/draft-content.md, ../resume_ai_system/plan/20-content-spine.md, ../resume_ai_system/old_projects.md, resume_2025.docx, reference/content-map.md, reference/decisions.md, reference/stack.md, and the Obsidian backup notes.

Acceptance test C6 covers this: no family, address, credential or third-party personal data in pages or corpus. The list below is what was removed to satisfy it, and the reason for each removal.

Excluded — personal identifiers

Item Where it appeared Why excluded
Date of birth resume_2025.docx, Personal Details Not needed to assess capability. Age is a discriminator and an identity-theft input.
Phone number resume_2025.docx, Personal Details Publishing a mobile exposes it to scrapers. Sam has not confirmed a phone number belongs on the site (reference/stack.md open items).
Street address / suburb resume_2025.docx ("live in Ivanhoe"), draft-content.md Address-level detail is a safety issue and is irrelevant to the work. "Melbourne based" is the published granularity.
Email address resume_2025.docx Kept off the pages in Phase 1. Contact details are an open decision for Sam; the narrative states the policy rather than the address.
Passport and visa status resume_2025.docx Immigration status is not published. Working rights are a conversation, not a web page.
Family names and details EVIDENCE-NOTES.md (school portals, children, household) Never published. The 2020–2026 period is described as "full-time parent to two children" with no names, ages, schools or locations.

Excluded — third-party personal data

Item Where it appeared Why excluded
Names of individual client contacts, agency colleagues and referees résumé prose No third party has consented to being named. Clients are represented by brand only, which was public campaign work.
Details identifying minors in a personal anecdote EVIDENCE-NOTES.md interests ("a 2 day hike … with 7 13 year old boys") Rewritten as "a group of teenagers in tow". A count of identifiable children is not needed to make the point.
Names of household members appearing in automation examples EVIDENCE-NOTES.md Household automation is described by function (lighting, audio, doors) and never by person.

Excluded — credentials and infrastructure detail

Item Where it appeared Why excluded
API keys, tokens, passphrases, secret file names n/a — never copied Nothing from ~/.config/environment.d/ was read or quoted. No key material enters the repo, per AGENTS.md §4.4.
Backup passphrase file path and repository passphrase Obsidian backup note Publishing the location of a passphrase file is a hint worth withholding. Backups are described by tier, tool and retention only.
Hostnames, internal IP addresses, ports-by-host, public DNS names reference/stack.md, Obsidian notes, live inspection Internal addressing is not needed to judge the platform work. Hosts are described by role ("the runtime host", "the edge host").
Internal service URLs and dashboards EVIDENCE-NOTES.md (the pipeline dashboard) Described as "a dashboard built to keep track of it". A private URL on a public page is an invitation.
Third-party account identifiers, billing detail n/a Not in the sources and not wanted.

Excluded — unverifiable or invented content

Item Where it appeared Why excluded
"42 devices" recovered site content Explicitly withdrawn in draft-content.md. Not used.
"~800ms end-to-end" latency recovered site content Explicitly withdrawn. Not used.
Invented venues, competition results, swell sizes, distances and restaurants recovered pursuits content Marked ❌ SUSPECT and confirmed as generated. Replaced with one honest line per pursuit.
"Diajio" recovered client list Spelling error for Diageo. Corrected, not carried.
Screenshot of the BBC National Archive engagement recovered site content The work was an internal tool. Described only; no image.

Metric discipline

Every numeric metric in content/ is traced to a source line, and the trace is recorded per metric in the completion comment on AUD-131. Two figures were deliberately not promoted:

  • Businesses: 3 active, 12 cumulative. The site says three are running now and twelve adopted it over time. Conflating them would be the easiest inflation available on this site.
  • Where-Woof: deployed, pre-market. The word "commercial" is not used about it anywhere.

Two numbers reported, not smoothed

  1. Agencies: 22 published, 23 in the summary material. The recovered, verified list holds twenty-two agency names. The published count is the count of the list. If a name is missing, the number rises to twenty-three and the note in content/history/l3/history-client-wall.md is deleted.
  2. Period start dates. Where the sources give no start date, the period is anchored on the homelab year (2020) and the page says so. Exact start dates are Sam's to correct.

Open questions for Sam

  • Contact details: email only, or also a phone number? (about-narrative.md states the current policy: email, supplied directly.)
  • Is a Melbourne suburb to be published? Currently excluded.
  • The missing twenty-third agency, if there is one.