Social Media 2 civic route logo Social Media 2

External review handoff

Security, legal, and financial evidence index.

Non-secret scope packets and current public status for independent review of Social Media 2. Social Media 2 is operated by the Polis cooperative.

H2 independent security

Latest pen-test report status

Status: waiting for independent external report. BUILD_DONE H2 requires a report from the last 12 months with zero Critical or High findings open, bound to the reviewed commit.

Open pentest packet

X4 independent legal

Latest legal review status

Status: waiting for independent legal review. BUILD_DONE X4 requires zero Critical or High legal blockers open against the cooperative articles and bylaws.

Open legal packet Open governance map

Incident response

Breach-response record

The public breach status is linked from the trust center, currently shows no breach pending, restates the 72h disclosure pledge, and names the signed incident-receipt fields.

Open breach record

Business-model invariant

Financial audit evidence

Local financial contracts verify ad_revenue == 0 and data_sale_revenue == 0. No ad endpoint and no data-sale endpoint are part of the public attack surface.

Open blocker manifest

Attack surface

Reviewer route inventory

The attack-surface packet lists public routes, methods, citizen-data flags, and webhook signature requirements without exposing secret values.

Open attack surface Open visual map

Boundary

Public status, not BUILD_DONE evidence

This index is a reviewer handoff and not BUILD_DONE evidence. H2, X4, E2/E3, and I0 remain blocked until their independent or real-pilot artifacts pass the gates.

Open build status