# Limits of this bundle

- **49 of the 75 SKUs are engine-backed.** The other 26 are PILOT (16), ADVISORY (0) or DESIGN (10).
  They are productised offers with published scope and limits, not finished engines.
- Every delivery here ran on a **fixed sample**, not a customer system. Passing these checks does not
  mean a production assessment was performed.
- The selftest manifests are **unsigned SHA-256 integrity records** (signed samples, where an engine signs, are in `deliveries/<SKU>/signed-sample/`). They detect a changed file; they do not
  prove who produced it. This is not an attestation and not a certification.
- The sample engines are heuristic or bounded: the MCP scanner is static, the memory sanitizer is
  pattern-based, the mandate guard evaluates supplied carts, and the WORM check proves package
  integrity, not the truth of the records.
- No customer, revenue, partnership, vendor integration, patent, third-party audit or SOC 2 claim.
- The team is a three-person team; no individual names are published on this page.