Security and privacy

• Local by default

  Edge needs no account for local use. Fetching sources and using providers makes network requests.

• Plain-file records

  Evidence logs are JSON lines under ~/.commonmeasure, readable in any editor.

• Session reporting

  Choose a reporting destination and approve reporting for the work the session belongs to. Only eligible source records may leave.

• Batch reporting

  Explicitly select a published batch run to report its admitted sources. Batch runs use this approval rather than session reporting permissions.

• Refusals

  Refused source addresses and reasons stay local. A session’s refusal count accompanies its delivered events. Reconstructed crossings never leave.

• Open reporting format

  Reporting uses Content Telemetry v1.0: source addresses, hashes, token estimates and retrieval facts. Prompts, answers, page content, engagement names, spend and quotes stay local.

• Credentials

  Provider keys come from the operator’s credentials file or launching environment, are used with their providers, and are never printed. The edge’s private signing key stays on the machine.

• Your safety checks

  Run custom checks before content reaches the model through Edge. Hooks record other supported reads afterwards and cannot stop them.

Connecting to Hub can report older sessions allowed by your current policy. Review which history may be sharedbefore connecting or widening reporting.

Common Measure Hub

Common Measure Hub lets your team share a source policy and review approved records together. Edge applies the policy locally and keeps the last accepted policy when Hub is unavailable.

You choose which directories may report. Prompts, answers, document text and internal reads stay local. See what is shared.

Hub access is by invitation during the pilot, which is free, including invited colleagues. Join the waiting list.

Invited by a colleague? Join your organisation. Admitted? Set up your organisation.

Retention

Twelve months, shortenable by the owner; deleted on request; purged thirty days after the organisation closes

Review

Security review

Personal data

Privacy notice for the waiting list and Hub accounts

This website

Cookies

None

Analytics

None

Third-party scripts

None

Third-party requests

None; every file is served from this site

Hosting

Cloudflare

Typeface

Geist, served from this site under the SIL Open Font License

AI use

Search and AI input allowed, AI training withheld: robots.txt, license.xml