Service provisioning center
Secure communications, Cloudflare, AWS, SCC, mail, partner and reporting service scaffolds.
One synthetic principal, one real exposure-defense loop, zero fake actions.
Required services are prepared, labeled and blocked before real provisioning.
Principal
Jordan Hale
synthetic-principal-001
Findings
12
deterministic synthetic dataset
StealthScore
54 -> 78
demo calibration
External actions
0
human approval required
Loop proof
Evidence that this screen supports the Jordan Hale defense loop.
State declaration
No surface claims a live action that is not wired.
Any outside-world touch remains protected, gated, or dry-run. Scaffolded controls can acknowledge intent locally but do not send, provision, upload, scan, call, publish, or mutate external systems.
Service cards
Every card declares owner, dependency and protected status.
Comms
Secure Client Communications
Encrypted, auditable channel between operator and protected client.
- Provider
- Cloak Harbor
- Owner
- Platform
- Target
- Day 1
Network
Edge / WAF
Firewall, IP allowlisting and bot mitigation in front of the cockpit.
- Provider
- Cloudflare
- Owner
- Platform
- Target
- Day 0
Storage
Evidence Object Store
Write-once, redaction-aware evidence vault with retention controls.
- Provider
- AWS S3 / Vercel Blob
- Owner
- Platform
- Target
- Day 1
Comms
Transactional Mail
Outbound notice delivery — dry-run only in the demo.
- Provider
- SendGrid
- Owner
- Operations
- Target
- Day 2
Comms
SMS / Voice
Client notifications and verification — dry-run only in the demo.
- Provider
- Twilio
- Owner
- Operations
- Target
- Day 2
Comms
Secure Meeting
Private operator/client briefings with agenda and audit trail.
- Provider
- Jitsi
- Owner
- Operations
- Target
- Day 7
Discovery
Web Exposure Scan
Consented surface scan against the principal's known identifiers.
- Provider
- Cloak Harbor
- Owner
- Discovery
- Target
- Day 1
Platform
Job Queue / Workers
Durable workers for scans, re-checks and webhook delivery.
- Provider
- Vercel / Upstash
- Owner
- Platform
- Target
- Day 14
Security
Endpoint Hygiene
Credential rotation, passkeys, device hygiene and account recovery separation.
- Provider
- Cloak Harbor checklist
- Owner
- Cloak analyst
- Target
- Day 1
Network
VPN / Privacy Networking
Reduce network and identifier linkage where appropriate for the protected principal.
- Provider
- Partner
- Owner
- Partner
- Target
- Day 14
Partner
Legal / Trust Partner
Registered-agent substitution, property record review and cover entity coordination.
- Provider
- Legal / trust partner
- Owner
- Legal/Trust partner
- Target
- Day 7
Remediation
Data Broker Opt-Out
Suppress people-search, phone and household exposure records.
- Provider
- Broker operators
- Owner
- Cloak analyst
- Target
- Day 2
Monitoring
Recurrence Monitoring
Re-check suppressed sources and report re-exposure without unbounded crawling.
- Provider
- Cloak Harbor
- Owner
- Cloak analyst
- Target
- Day 14
Reporting
Executive Reporting
Generate before/after report and evidence-linked proof for the principal.
- Provider
- Cloak Harbor
- Owner
- Cloak analyst
- Target
- Day 30
Related findings
Synthetic exposure objects connected to this surface.
EXP-002CriticalValidatedProperty record links residence to principal name
Highest physical-risk exposure in the case.
EXP-004HighAction readyWHOIS-style metadata exposes personal email
Links online identity to physical contact details.
EXP-005CriticalWaiting partnerOfficer filing names principal at residential address
Requires legal/trust partner remediation.
EXP-007HighValidatedReused credential pattern in synthetic breach corpus
Most direct account-takeover vector.
Guarded interactions
All sensitive controls are honest scaffolds.
Request service setup
No external action taken from this UI phase.
Evidence, risk, work, approval, report
The single loop remains visible from every route.