Quaestor’s multi-turn technique turns an unverifiable model claim into a defensible verdict. Every finding walks the same path; every gate decision is Ed25519-signed with a per-tenant key.
Secrets stripped, redacted, and sealed with a manifest — before any model sees a line.
The codebase cartographed: entrypoints, privileged sinks, and what is actually reachable.
The exploit path traced end to end and proven — not asserted from a snippet.
A counter-test a genuine finding must survive. This is what kills the hallucination.
Blast radius calibrated to CVSS, OWASP, and CWE — provisional until confirmed.
Report-grade and signed, or refused. There is no “probably.”
A finding arrives with its full chain of custody: the sanitised source it was found in, the traced path, the negative control it survived, the signed gate ledger A–H, and the signer identity. Nothing is taken on faith.
When a candidate can’t survive a gate, that is recorded too — a disproven case is first-class, not swept away. The portal shows what was refused and why. That honesty is the difference between a scanner and a tribunal.
Because most tools guess, they can report volume but never integrity. A governed pipeline can report both.
Mean time-to-evidence, proof rate, and disproven rate — the numbers a board trusts because they can be traced to a signature.
Run a scan and get the whole chain of custody back — proven, disproven, and signed.