SUBROSA // OS
PRIVATE FORENSIC DECISION WORKSPACE

Operational protection.
Evidence-led decisions.

An immutable signed snapshot, with interactive scenarios that stay on this device.

PENDING · independently checking signed baseline

No verified status is asserted until this browser completes Ed25519, BLAKE2b-256, Merkle and custody checks.

SCENARIO EXPLORER · Legal likelihoods and commercial projections are assumptions, not measured trial probabilities or guaranteed returns. The integrity badge covers the original signed snapshot, never slider changes.
15-MINUTE EXECUTIVE WORKSPACE

Daily protection. A reviewable case file.

SYNTHETIC DEMONSTRATION · Financial savings are modeled assumptions. Integrity checks establish bytes and signatures, not legal authority, misconduct, privilege or admissibility. Live controls are unsigned scenarios.
SIGNED BASELINES + UNSIGNED SIMULATIONS

Four operational checks before a costly mistake.

A / CONTRACTS & GUARANTEES

Inspect the authorization structure.

Ψ is a configured authority index. Ψ² is a review-priority index, not a probability of estoppel or bad faith. A distinct, timely CFO + CAO quorum is checked separately.

Proposed surgical clauses · counsel review
    Review flags
    Exact source citations and hashes
    B / STAFF ERROR MEMORY

    Rehearse a pre-execution intercept.

      Observed browser calculation time excludes acquisition, disk synchronization and signing. Checklist completion is a local rehearsal, never an authorization to execute. Prevented loss is an estimate, not booked savings.

      C / MANAGEMENT RISK SENTINEL

      Follow sequential evidence, not accusations.

      Gold: unreset log wealth. Mint: reflected CUSUM (not a martingale). Anytime false-alarm control requires each conditional mean anomaly score under H₀ ≤ 0.02. An evidence index is not a probability of misconduct.

      D / BUDGET & EXTRA EXPENSE RADAR

      Stress-test remaining costs.

      Live tail values use a moment-matched normal approximation for compound Poisson lognormal jumps. They are exact for the configured Gaussian model when jump intensity is zero. Compare the independently computed signed baseline below.

      Signed baseline