Phase 0 claims
The gateway and Tinfoil see prompt plaintext in memory. Request content is not intentionally persisted or exported. Attestation identifies measured code and configuration; it does not prevent runtime compromise or traffic correlation.
Demo accounting is memory-only and resets on restart. No payments, Tor, replicas, public API, or audit are included.