Every public claim has a row

This table matches the ENGINE PATH. as-built means you can verify it on the live origin today. TARGET is named so we do not sell it as shipped. doctrine is a product rule we will defend in diligence.

Claim	Status	Evidence
Ikaros is the 800-207 policy engine; data sources feed it; PEPs enforce on the data plane	as-built	Architecture hero · PE / PA / PEP · feeds are inputs, not SKUs
ENGINE PATH is live on this origin (Edge → Assess → Decide → Gate → Act)	as-built	Five stage cards, one diagram, Play, transcript on Architecture and Ikaros
Public URLs are extensionless (no .html in chrome)	as-built	Apache 301 from `*.html` to the clean path. Files stay `.html` on disk. Canonicals omit the extension.
Five stages. One gate nothing skips.	as-built	E / A / D / G / N. AEGIS is HUMAN_ONLY. AUTO_SAFE off.
Admit / isolate / deny execute at Edge PEPs	as-built	Diagram: EDGE PEPs above CORE. Act returns to that row.
This origin is not a PEP and not a node on the path	as-built	No grant UI here. PEPs run at the customer edge. Architecture copy.
Dual-plane Zero Trust (untrusted is never enrolled private)	as-built	Data sources + Edge PEPs. Selective inspect is private-plane only. Zero Trust
AEGIS is HUMAN_ONLY; AUTO_SAFE off	as-built	Rose gate on the diagram · Ikaros
CEP-Rank is classical; LLM narrates only	as-built	Decide stage · CEP-RANK node
Dedicated enclave; fused telemetry does not leave it	doctrine	Architecture tenancy rule. QFC / CORE / journal run in the enclave, not on this origin.
Not an ATO; mapped to NIST / CISA / NSA Zero Trust language	as-built	Trust · GOVERN node names residual risk
QUANTUM-FACING = PQC / CBOM / HNDL signals — not a QPU in the rank path	as-built	Quantum-facing node on the diagram
QFC bus and journal API as a customer product	TARGET	Named on the ENGINE PATH. Not a public API on this origin.
This origin actuates PEPs or ranks live traffic	will-not-claim	Enclave only. This origin publishes the ENGINE PATH.