# Cloak Harbor Personal Exposure Defense

> Personal exposure defense for authorized clients. Defensive Personal Exposure Defense (PED) control plane for authorized operators protecting consented clients. Public reads follow CLOAK_VISIBILITY_MODE (redacted, private, or public); protected work requires PLATPHORM_API_KEY and human approval.

## What this is
- A defensive control plane: discover, validate, score, remediate, and report on a consented principal's public exposure.
- NOT a people-search engine, doxxing tool, or OSINT crawler. See https://cloak.platphormnews.com/docs/responsible-use.
- Rule: authorized client scope, explainable evidence, zero fake actions.
- Roadmap or unavailable modules are labeled locked/degraded. Outside-world actions require human approval and protected server-side authorization.

## Core docs
- Overview: https://cloak.platphormnews.com/docs
- Personal Exposure Defense: https://cloak.platphormnews.com/docs/personal-exposure-defense
- SigReduce open-core schema: https://cloak.platphormnews.com/docs/sigreduce
- Architecture: https://cloak.platphormnews.com/docs/architecture
- Responsible use: https://cloak.platphormnews.com/docs/responsible-use
- FAQ: https://cloak.platphormnews.com/faq

## API
- OpenAPI: https://cloak.platphormnews.com/openapi.yaml
- OpenAPI JSON: https://cloak.platphormnews.com/openapi.json
- Health: https://cloak.platphormnews.com/api/health
- Findings: GET https://cloak.platphormnews.com/api/v1/findings (paginated)
- Finding detail: GET https://cloak.platphormnews.com/api/v1/findings/{id}
- Principal: GET https://cloak.platphormnews.com/api/v1/principal
- StealthScore: GET https://cloak.platphormnews.com/api/v1/stealthscore
- Production readiness: GET https://cloak.platphormnews.com/api/v1/production-readiness
- Vercel notebook blueprint: GET https://cloak.platphormnews.com/api/v1/vercel/notebook
- Paywall status: GET https://cloak.platphormnews.com/api/v1/paywall/status
- Checkout: POST https://cloak.platphormnews.com/api/v1/paywall/checkout (Stripe Checkout when configured)
- Integrations: GET https://cloak.platphormnews.com/api/v1/integrations
- Vercel Connect: GET https://cloak.platphormnews.com/api/v1/integrations/vercel-connect
- Events outbox: GET https://cloak.platphormnews.com/api/events
- Action packet draft: POST https://cloak.platphormnews.com/api/v1/action-packets/draft (dry-run, human approval required)
- Webhook receiver: POST https://cloak.platphormnews.com/api/webhooks (signed, idempotent)

## UI routes
- Start or return: https://cloak.platphormnews.com/onboarding
- Customer portal: https://cloak.platphormnews.com/portal/customer
- Management portal: https://cloak.platphormnews.com/portal/management
- Cockpit: https://cloak.platphormnews.com/case
- Evidence: https://cloak.platphormnews.com/case/evidence
- Kanban: https://cloak.platphormnews.com/case/kanban
- Calendar: https://cloak.platphormnews.com/case/calendar
- Actions: https://cloak.platphormnews.com/case/actions
- Report: https://cloak.platphormnews.com/case/report
- Settings: https://cloak.platphormnews.com/case/settings

## Auth & limits
- Read endpoints follow the active visibility policy; configured Postgres returns honest empty state, while fixture fallback is limited to environments without persistence.
- State-changing endpoints require Authorization: Bearer $PLATPHORM_API_KEY or X-PlatPhorm-API-Key: $PLATPHORM_API_KEY.
- Webhooks require an HMAC signature in x-cloak-signature.
- All external/takedown actions are DRY-RUN and require explicit human approval. AI never auto-submits.

## Machine index
- https://cloak.platphormnews.com/llms-full.txt
- https://cloak.platphormnews.com/llms-index.json