LRRK Method

The Security Story MethodologyHistory is never rewritten. It is only ever added to.

A Security Story is persisted, versioned, reviewable data — not a paragraph regenerated each time a page loads. What follows is the vocabulary this archive uses, and the limits it refuses to blur.

§ 01

Assertion taxonomy

Fact
Directly established by a signed event or evidence-backed validation.
Inference
A reasoned reading of several facts. Must cite them and name its uncertainty.
Judgment
An accountable human disposition, priority or materiality decision.
Recommendation
An advised action. Never disguised as an established condition.
Unknown
A preserved gap, insufficient-evidence state, or unresolved contradiction.

§ 02

Evidence outcomes are preserved, including the negative ones

Established
Evidence supports the scoped condition.
Not established
Evidence did not establish it within scope. Not 'absent'. Not 'safe'.
Rejected
Controlled evidence disproved the stated hypothesis within scope.
Inconclusive
Available evidence cannot resolve the hypothesis.
· Not evaluated
No authorized examination occurred.

Method, scope, time and limitations always accompany an outcome.

§ 03

Confidence is not a security score

Confidence communicates the support behind an assertion. It does not rate how safe a subject is, and a version-level summary never conceals a low-confidence sentence underneath it.

High
Multiple consistent authoritative sources, or controlled validation with documented limits.
Moderate
Credible support exists, but meaningful limitations or alternatives remain.
Low
Preliminary, indirect, sparse or conflicting evidence.
Not rated
Confidence cannot be responsibly assigned.

§ 04

Capability truth labels

Nothing in this demonstration is asserted to exist operationally. Everything visible here is a designed workflow: read-only, fictional, and generated from fixtures. No evidence is collected, hashed, signed, published, remediated or monitored, and no control on these pages implies that such an action occurred.

A Passport is point-in-time and device-specific. It is not certification, approval, a warranty, or a guarantee of safety.