Defendable Open Infrastructure · the receipts behind the receipts.

The actual models. The actual sources. The actual guardrails. Most "AI valuation" platforms won't tell you which model wrote the words, which sources grounded the analysis, or where the data is stored. DefendableOS does.

Validate the Validator™ doesn't stop at validating the AI. It validates the infrastructure under the AI, the storage under the infrastructure, and the doctrine under the storage. This page is that audit.

Models in production

• Kimi K2.6 (Moonshot) · primary AIOV narrative · typed contracts VALIDATOR_FLAG_TOOL + RESEARCH_CLASSIFY_TOOL · rejects temperature ≠ 1 · self-disciplines under closed-schema tool use.
• OpenAI gpt-4o · secondary completion · independent classification under RESEARCH_CLASSIFY_TOOL · cross-validator second opinion.
• Brave LLM Context · live web grounding · returns grounding.generic[] as canonical source list · feeds Validator Check 5 (market-evidence grounding).

Doctrine guardrails enforced in code

• Server-side AI downgrade guard · CONFIRMED_SALE_PRICE auto-downgraded to MARKET_COMMENTARY without a confirmed-sale signal in the rationale.
• Affirmative-claim scan (not denial-substring) · Validator Check 10 scans for "this is a licensed appraisal" not "not a licensed appraisal".
• Doctrine-disclaimer integrity · Validator Check 11 requires verbatim disclaimers · paraphrase fails.
• Confirmed-sale signal-class doctrine · only PERMISSIONED_CONNECTED_SALE and FIRST_PARTY_DEFENDABLE_SALE count as confirmed across 11 signal classes.
• ITAD partner-feed Grade B ceiling before validator review · OPERATOR_STATED labels everywhere operator claims appear.

Object storage · the 4-bucket privacy vault

• PRIVATE_EVIDENCE · operator uploads · never publicly exposed.
• MARKET_OBSERVATIONS · Brave snapshots · eBay listing observations · internal analysis only.
• DERIVED_DATASETS · comp sets · scores · validator receipts · linked to deeds at publication.
• PUBLIC_ASSETS · the published deed and verify-page payload · the only bucket public_export_or_refuse() allows.

Connector honesty matrix

19 connectors documented across AI, asset-side, and demand-side lanes · each with real status (READY · CONFIGURED_DISABLED · NOT_CONFIGURED · FUTURE_DISABLED · PLAN_VERIFICATION_REQUIRED · AGREEMENT_REQUIRED). No NOT_CONFIGURED connector silently fakes a result.

Open source

• defendableos · platform · github.com/SudoSuOps/defendableos · 33+ models · 10 migrations · 141/141 tests.
• defendable · landing · github.com/SudoSuOps/defendable · 9 pages · SSR-lite middleware · sitemap + llms.txt + _headers.
• legalsniper-plugin · Apache 2.0 · github.com/SudoSuOps/legalsniper-plugin · v0.1.0 tagged · closed-schema HANDOFF_INTENTS.