huereo / passport

Evidence and the Release Passport

Every release, approved or blocked, writes its evidence next to the data. The Passport is the record your DPO, counsel and auditors read.

01 Evidence

Every release, approved or blocked, writes its evidence next to the data.

File in the output folderWhat it is
release/The transformed copy, present only when approved
blocked/The held-back copy of a blocked release, for your review only; never shared
RELEASE_APPROVED or RELEASE_BLOCKEDThe result marker
passport.jsonThe canonical record of the release
passport.mdThe same, readable
evidence.htmlA self-contained report for the DPO or an auditor, opens in any browser
plan.jsonEvery action and its reasons
verification.jsonThe independent verifier’s findings
risk_report.jsonResidual identifiers, k-anonymity, l-diversity
utility_report.jsonDrift and kept fields
performance.jsonTime and throughput per stage
run_manifest.jsonEngine, packs, key ids and file hashes used

02 After the release

Prove it later, check the next one, measure detection.

Prove it later

huereo verify RUN_ID re-checks a release; if any released file was changed after approval it exits 1 and names the file. huereo register lists every release with its recipient, purpose, approvals and Passport hash, as JSON or CSV, and the console’s Overview shows it at a glance. huereo report renders the evidence as HTML or Markdown.

Privacy CI

huereo ci runs the next release and compares it with the last accepted Passport. The result is UNCHANGED_PASS, or names what moved. Ready steps ship for GitHub Actions and GitLab CI. The summary holds statuses, field paths and reason codes, never a data value.

  • UNCHANGED_PASS
  • SCHEMA_CHANGED
  • NEW_RISK
  • REGRESSED
  • MODEL_CHANGED
  • LAW_PACK_CHANGED
  • RESOLVED
  • UNRESOLVED

REGRESSED names what got worseUTILITY_FAILURES_INCREASED, K_DECREASED, UNIQUENESS_INCREASED, STATUS_PASS_TO_FAIL

Check detection on your own data

huereo review samples a file for your team to mark right, wrong or missed in the console. The score (precision, recall, leak rate) holds counts only, so it can be shared with us, and the corrections become a rule pack for later releases.

No data reaches Supermerco

Logs carry no data values. A support bundle (huereo support-bundle) holds versions, packs, settings and run states, and no data values.

Bring one data share you need to send.

Run huereo on one of your own files on a one-hour call, or start a 30-day pilot on your server (₹9,900, credited in full to your plan). Or write to hello@supermerco.com.