LRRK Method
The Security Story MethodologyHistory is never rewritten. It is only ever added to.
A Security Story is persisted, versioned, reviewable data — not a paragraph regenerated each time a page loads. What follows is the vocabulary this archive uses, and the limits it refuses to blur.
§ 01
Assertion taxonomy
- ■ Fact
- Directly established by a signed event or evidence-backed validation.
- ◇ Inference
- A reasoned reading of several facts. Must cite them and name its uncertainty.
- ▲ Judgment
- An accountable human disposition, priority or materiality decision.
- → Recommendation
- An advised action. Never disguised as an established condition.
- ○ Unknown
- A preserved gap, insufficient-evidence state, or unresolved contradiction.
§ 02
Evidence outcomes are preserved, including the negative ones
- ■ Established
- Evidence supports the scoped condition.
- □ Not established
- Evidence did not establish it within scope. Not 'absent'. Not 'safe'.
- ⊗ Rejected
- Controlled evidence disproved the stated hypothesis within scope.
- ◐ Inconclusive
- Available evidence cannot resolve the hypothesis.
- · Not evaluated
- No authorized examination occurred.
Method, scope, time and limitations always accompany an outcome.
§ 03
Confidence is not a security score
Confidence communicates the support behind an assertion. It does not rate how safe a subject is, and a version-level summary never conceals a low-confidence sentence underneath it.
- High
- Multiple consistent authoritative sources, or controlled validation with documented limits.
- Moderate
- Credible support exists, but meaningful limitations or alternatives remain.
- Low
- Preliminary, indirect, sparse or conflicting evidence.
- Not rated
- Confidence cannot be responsibly assigned.
§ 04
Capability truth labels
Nothing in this demonstration is asserted to exist operationally. Everything visible here is a designed workflow: read-only, fictional, and generated from fixtures. No evidence is collected, hashed, signed, published, remediated or monitored, and no control on these pages implies that such an action occurred.
A Passport is point-in-time and device-specific. It is not certification, approval, a warranty, or a guarantee of safety.