Tensor privacy, trust tiers and retention

Intermediate representations are task-scoped. Frames bind account, task, cohort, revision, edge and physical leases and use authenticated framing inside TLS 1.3 mTLS across hosts. These protocol fences protect the Cohort transport; they do not constitute account-aware placement or end-to-end tenant placement isolation.

Share Hive requires explicit account opt-in and starts unselected. This page does not claim universal provider, residency or end-to-end placement isolation.

Host staging uses bounded slots, generations, TTL, acknowledgement and best-effort zeroization. A content-free WAL stores only IDs, hashes, event types and aggregate byte counts needed for recovery. Prometheus labels exclude tenant/task/cohort/model, and public events exclude transport addresses, keys and memory handles.

Cohort does not create a second prompt/completion retention path. Retention remains deployment-specific until a public policy is published. Fabric health fails closed when the WAL/reaper/listener is unhealthy.