K12 · differential evidence, reconciliation, and information-flow control

Information-Flow and Taint Tracking

Direct answer

K12 labels 18 fields, validates 12 release transformations, rejects three prohibited downgrades, and confirms that no protected value appears in the public model.

Stable record: K12-PAGE-INFORMATION-FLOW
Claim status: VERIFIED PROJECT IMPLEMENTATION
Last reviewed: 2026-08-16
Research cutoff: 2026-08-16
Source type: GOVERNED PROJECT KNOWLEDGE
Currentness: Current for release 2.1.0; external sources require periodic revalidation.
Correction state: No unresolved public correction recorded for this release.
Machine record: Static JSON record

Evidence and authority boundary. K12 publishes deterministic static models, signed offline reference bundles, synthetic fixtures, review records, custody receipts, public projections, and release-time comparisons. It does not perform live network acquisition, deploy software, operate a facility, make an award, authorize force, certify compliance, enforce production access control, or convert a signature into factual truth.

Claim-level evidence boundary

VERIFIED PROJECT IMPLEMENTATION

Information-flow projections exclude protected values

K12 labels fields and validates projection transformations and leakage negatives without including removed protected values.

Scope: K12 deterministic local reference implementation.

Static modeling is not production access-control enforcement.

SRC-W3C-PROV-O: Entities, activities, and agents

Label model

PUBLICrank 0

Approved for public projection.

PROTECTEDrank 1

Restricted technical, custody, or operational detail.

PRIVILEGEDrank 2

Restricted legal or decisional material.

18labeled fields

12transformations

3rejected downgrades

10negative tests

0protected values published

Field-level labels
ID	Field	Source label	Public projection	Taint sources
IFF-K12-001	record.id	PUBLIC	True	0
IFF-K12-002	record.status	PUBLIC	True	0
IFF-K12-003	record.publicBoundary	PUBLIC	True	0
IFF-K12-004	facility.pattern	PUBLIC	True	0
IFF-K12-005	facility.networkTopology	PROTECTED	False	1
IFF-K12-006	facility.exactSettings	PROTECTED	False	1
IFF-K12-007	identity.publicKeyFingerprint	PUBLIC	True	0
IFF-K12-008	identity.privateKey	PRIVILEGED	False	1
IFF-K12-009	acquisition.publicDebrief	PUBLIC	True	0
IFF-K12-010	acquisition.offerDetail	PROTECTED	False	1
IFF-K12-011	legal.publicPosition	PUBLIC	True	0
IFF-K12-012	legal.advice	PRIVILEGED	False	1
IFF-K12-013	scheduler.summary	PUBLIC	True	0
IFF-K12-014	scheduler.rawCustody	PROTECTED	False	1
IFF-K12-015	domain.referenceAce	PUBLIC	True	0
IFF-K12-016	domain.ownerEvidence	PROTECTED	False	1
IFF-K12-017	evidence.publicDigest	PUBLIC	True	0
IFF-K12-018	evidence.removedValue	PRIVILEGED	False	1

Public projection: False

Release transformations

Declared transformations
ID	Source	Target	Operation	Allowed
IFT-K12-001	PUBLIC	PUBLIC	COPY	True
IFT-K12-002	PROTECTED	PUBLIC	REMOVE_VALUE_AND_RECEIPT	True
IFT-K12-003	PRIVILEGED	PUBLIC	REMOVE_VALUE_AND_RECEIPT	False
IFT-K12-004	PROTECTED	PROTECTED	COPY_WITH_CUSTODY	True
IFT-K12-005	PRIVILEGED	PROTECTED	DENY_DOWNGRADE	False
IFT-K12-006	PRIVILEGED	PRIVILEGED	COPY_WITH_CUSTODY	True
IFT-K12-007	PUBLIC	PROTECTED	UPLABEL	True
IFT-K12-008	PUBLIC	PRIVILEGED	UPLABEL	True
IFT-K12-009	PROTECTED	PRIVILEGED	UPLABEL	True
IFT-K12-010	PUBLIC	PUBLIC	HASH_REFERENCE	True
IFT-K12-011	PROTECTED	PUBLIC	DIGEST_ONLY	True
IFT-K12-012	PRIVILEGED	PUBLIC	DIGEST_ONLY	False

Static labels, taint propagation, redaction receipts, and negative tests model release behavior. They do not constitute production identity, authorization, storage, transport, or access-control enforcement.