A reproducible S0 for any public SaaS.

Online stage

Eleven fixed paths, one declared observer.

ProofSurface sends public HTTPS GET requests without cookies or credentials, follows at most three validated redirects, reads at most 192 KiB per response, and records whether the body hash covers the complete response or only that prefix.

Full S0

The web report is the beginning, not the conclusion.

1. 01
   Freeze the public surface.

   Record timestamps, URLs, clients, headers, bodies or bounded hashes, and limits.

2. 02
   Freeze the buyer scenario and fact sheet.

   Define qualification requirements and expected evidence before model runs.

3. 03
   Run named consumer products and a pinned API model.

   Use fresh sessions, exact prompts, complete outputs, citations, and versions.

4. 04
   Add owner-only crawl and request evidence.

   Keep unavailable evidence explicitly Unknown; a spoofed user agent proves nothing.

5. 05
   Publish facts, interpretations, hypotheses, and unknowns separately.

   Preserve null results and corrections when they change the reading.

Evidence discipline

Seven states stay separate.

1. 01
   PreparedThe resource exists and has a declared purpose.
2. 02
   ReachableA named observer received it at a recorded time.
3. 03
   ObservedA real external platform requested it.
4. 04
   IngestedThe platform incorporated that version.
5. 05
   RetrievedThe platform surfaced it for a task.
6. 06
   UsedThe answer demonstrably relied on it.
7. 07
   InfluentialIt changed an answer or buying decision.

Reproduce and inspect

The method is public and versioned.

Every report has a stable link for 30 days and a JSON export. The canonical procedure, implementation, Signmos evidence, and corrections live in the ProofSurface repository.