Discovery is not identity binding.
A page can be real, current, and relevant while still failing to bind to the exact person under review.
Enterprise credibility intelligence
The internet is not lying to you. It cannot tell you whose record it is holding.
The measured problem
Can this source be bound to this person, in this office, in this jurisdiction, at a date that can be established?
A page can be real, current, and relevant while still failing to bind to the exact person under review.
Confidence measures how much the index could read, not how much the index approves of someone.
When evidence cannot carry a conclusion, the instrument returns a typed refusal instead of manufacturing precision.
The governor study
This is not a story about governors. It is the ceiling. Director-level candidates have a fraction of that public record.
The instrument
Placement and confidence answer different questions. A result is incomplete without both.
Where the bindable record places the subject, expressed without a person score.
How much of the record the index could read. This is a statement about evidence, never about the person.
Seven independent signals
Signals are read independently of placement. Placement never reads a signal value, and the two do not borrow each other's confidence.
How much of what others published about this person is reachable from a property they own.
Whether the same person shows up the same way across the properties they control.
Whether the record is close to the work they are being considered for.
Whether narrowly defined substantive work can be inspected and responsibly attributed.
Whether this person takes positions specific enough to be wrong about.
Whether recognition runs in both directions or only toward them.
Whether what they publish is carried further by identifiable others.
The live run view
Sources found, sources bound, and sources not read remain separate. The surface shows the outcome without disclosing the protected mechanism underneath it.
The refusal engine
A downstream system cannot read a hidden answer because no answer exists.
No setting, plan tier, or support request turns a refusal into a placement.
The person can confirm their own record. The candidate is a party to the read, not a target of it.
Reason, evidence state, and timestamp travel with the result.
{
"placement": "INSUFFICIENT_BASIS_TO_PLACE",
"level": null,
"confidence": null,
"score": null,
"sources_found": 6,
"sources_bound": 0,
"sources_not_read": 2,
"permitted_use": ["none"],
"receipt": "rcpt_01K7...e3a"
}
Enterprise delivery
Authorization, confidence, evidence state, permitted use, and refusal travel with every result.
A typed response for assistants, internal tooling, and automated workflows. Unknown cannot be quietly rounded into zero.
The read attaches to the requisition the team already works, with authorization and subject confirmation carried on the record.
Legal, compliance, and talent leadership receive the evidence trail, authorization history, and every refusal made on their behalf.
Governance by design
Employment use is authorized per engagement and disabled by default, and a documented compliance and reinvestigation process governs every read.
The instrument does not preview, cache, or describe a hidden level.
Supported, corroborated, uncorroborated, and not read. The index does not call anyone a liar.
Purpose gating is data.
The economics
A $100K annual contract would break even at eight tenths of one prevented failure a year. Both inputs are prices actually paid in the market. No operational damage is included.
Enterprise access
Access is granted per engagement. Employment use requires signed authorization and the subject's own confirmation.