Privacy · Selective disclosure
Abraxas shares a policy result, not the evidence
Abraxas shares a policy result, not the underlying evidence. This is enforced selective disclosure from the catalog, not a zero-knowledge proof system.
What is released
Each catalog policy pack already names a partner-visible result and a withheld set. The server applies that disclosure profile before Holder briefs, consent previews, public receipts, Partner Kit responses, webhooks, Passport activity, Launchpad health summaries, and portable action-contract results. Partners keep the same minimal contracts they already use. Eligibility rules do not change.
What is withheld
Unless a pack’s existing approved contract specifically allows a field, the boundary forbids raw evidence, document or selfie material, legal name, email, date of birth, address, wallet addresses and public keys, OAuth or session material, provider payloads, raw database errors, and internal policy implementation details. Public receipts, Partner Kit, and webhooks keep receipt identifiers and signatures because those existing contracts already include them. Holder, Passport, and action-contract JSON do not.
Holder URLs, callbacks, and Launchpad activity
Consent and continue URLs carry only verify_request. Return navigation stays on the stored continuation record, not the query string. Callback query keys are untrusted and cannot set partner, policy, version, destination, or return navigation. Launchpad activity metadata is allowlisted at write time and projected again on read, so receipt payloads, signatures, hashes, wallets, PII, callback URLs, OAuth material, provider payloads, internal policy fields, and raw errors are not persisted.
Admin evaluation paths
Internal policy evaluation and evidence stores used by authorized operators are outside partner, holder, and public serialization. They remain behind existing admin authorization and are not a client-visible selective-disclosure surface.
Catalog packs
age_18_retail— age_eligible_18. Withheld: date of birth, government ID images, legal name, email.age_21_retail— age_eligible_21. Withheld: date of birth, government ID images, legal name, email.residency_us— residency_check_passed. Withheld: street address, government ID images, legal name, email.wallet_control— wallet_control_confirmed. Withheld: private keys, seed phrases, email, government ID images.membership_credential— credential_active. Withheld: email, legal name, government ID images, membership documents.collector_redemption— redemption_eligible. Withheld: date of birth, government ID images, wallet seed, email.identity_liveness— identity_and_liveness_met. Withheld: selfie, government ID images, biometric templates, email, legal name.sandbox_economic_demo— sandbox_demo_eligible. Withheld: date of birth, government ID images, legal name, email, wallet address.sandbox_institutional_protocol_access— organization_eligible. Withheld: legal name, company registration number, documents, beneficial owners, address, wallet, provider payload, raw receipt, callback URL, secret.
Not zero-knowledge cryptography
Enforced selective disclosure today is an allowlist and redaction boundary on server serializers. Advanced cryptographic proof systems are a future path and are not claimed here.
Sandbox-only packs remain unmistakably not Production-usable. Browser-supplied disclosure profiles, claim allowlists, policy versions, environments, receipts, keys, callbacks, approvals, and Production flags are rejected.