Raven

Public-safe evidence architecture

Current Data and Measurement Architecture

This page separates what Raven has measured, reconstructed, replayed and qualified from what remains historical, planned or customer-required. It uses public-safe identifiers only.

Evidence window2026-03-01 to 2026-07-16

138 inclusive days.

Evidence-source records905639

Rows, events and entries counted from public-safe internal and synthetic artifacts; not a customer telemetry dataset.

Replay references1030

Replay and decision packet lineage references.

Qualification references460

Runtime, V&V and qualification artifacts.

Forensic source files70284

Source files matched during public evidence reconstruction; not telemetry rows.

Public-safe target identifiers1734

Deterministic IDs derived from raw URL/domain/IP evidence; not customer, company or asset counts.

Canonical counter definitions

What the public counters mean

905639 evidence-source records

Rows, events and entries counted from public-safe internal and synthetic Raven artifacts for the 2026-03-01 to 2026-07-16 evidence window. This is not a single customer dataset, not a full public dataset and not a customer telemetry-row claim.

70284 forensic source files

Files matched during public evidence reconstruction from local Raven artifacts. They are candidate source files for accounting and traceability, not telemetry measurements and not all production files.

1734 public-safe target identifiers

Deterministic public IDs derived from raw URL, domain or IP evidence. Raw targets remain private; the number does not represent customers, organizations, assets or endpoints disclosed to the public.

Device and network-path boundary

Measurement paths are disclosed as public-safe classes

The private lineage may contain local device, network and provider clues. The public surface only exposes bounded classes such as fiber/ethernet, mobile/Wi-Fi, parallel laptop path or unknown path. Provider names, local hostnames, SSIDs and raw endpoint labels are not public evidence.

Confirmed public-safe class

DEVICE_MINI_FIBER_ETHERNET and REGIONAL_FIBER_ETHERNET_PATH appear in the collector ledger with medium confidence for multiple reconstructed evidence families.

Known boundary

Not every path is currently active. Some streams are recovered, historical, planned, synthetic, production-blocked or referenced by replay/qualification artifacts.

Required for stronger claim

Per-run execution manifests with device ID, network path ID, collector ID, target ID and timestamp are required before Raven can claim continuous multi-device production measurement.

Collector status boundary

Collector evidence is not one undifferentiated claim

Raven separates active, recovered, historical, planned, replay, synthetic and production-blocked evidence. This protects public communication from overstating what the current evidence proves.

CollectorStatusDeviceNetwork pathEvidence refs
dual_collectorRECOVERED_NOT_CURRENTLY_SUPERVISEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH153
replay_engineOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH1178
qualification_runnerOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH4135
rtt_latency_collectorOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH1025
unclassified_evidence_artifactOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH51637
dns_multi_collectorACTIVE_CONFIRMED_FRESHDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH288
packet_quality_collectorHISTORICAL_OR_STALE_NOT_ACTIVEDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH162
public_evidence_releaseOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH13338
synthetic_twinOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH139
http_ttfb_collectorOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH35
route_fingerprint_collectorOBSERVED_OR_REFERENCEDDEVICE_MINI_FIBER_ETHERNETREGIONAL_FIBER_ETHERNET_PATH7
collector_schedulerSUPERVISED_BUT_NO_TASKS_DEFINEDUNKNOWN_DEVICEUNKNOWN_PATH0
white_black_collector_topologyPLANNED_PRODUCTION_BLOCKEDUNKNOWN_DEVICEUNKNOWN_PATH0
collector_stream_inventoryPRODUCTION_BLOCKEDUNKNOWN_DEVICEUNKNOWN_PATH0

Public-safe paths

  • REGIONAL_FIBER_ETHERNET_PATH
  • MOBILE_LTE_WIFI_PATH
  • PARALLEL_LAPTOP_PATH
  • UNKNOWN_PATH

Disclosure rule

No operator names, ISP names, SSIDs, local file paths, raw domains, raw IP addresses or partner/client labels are published on this surface.

What this does not prove

It does not prove that every collector was live in production for the whole period. Stronger claims require explicit per-run execution manifests.