privacy/workstreams/html-deck.json

{"display_name":"HTML Deck","external_boundaries":[{"content":"Published package requirements and ordinary package-index request metadata. Existing workflow arguments are forwarded to a local Python child; they are not included in the pip install command.","controls":["The direct CLI selects published core or registered component requirements before importing workflow modules.","The launcher preserves the working directory and arguments in the local child process; this does not redact arguments or change the workflow data boundary.","An existing matching runtime is reused. Setup installs into a fingerprinted user-scoped environment and propagates failure; it does not install into the case folder."],"destination":"Python Package Index (PyPI) or the index selected by the user's Python configuration","id":"direct-cli-python-dependency-setup","kind":"public_research","optional":false,"purpose":"Prepare the declared Python dependencies before running a documented workflow CLI","requires_confirmation":false,"runtime_profiles":["openai-codex","anthropic-cowork","openai-chatgpt","google-antigravity"]}],"governed_paths":["skills/html-deck/SKILL.md","skills/html-deck/assets","skills/html-deck/references","skills/html-deck/scripts","scripts/verify_advisory_html_delivery.py","scripts/advisory_delivery.py","scripts/advisor_case_core.py","scripts/advisory_evidence_lineage.py","scripts/case_store.py","scripts/bounded_process.py","scripts/self_relaunch.py","scripts/managed_python_runtime.py","scripts/_managed_python_runtime.py","requirements.txt","components.json","scripts/advisory_lineage_labels.py"],"model_context":{"classes":[{"content":"Word, PDF, Markdown, spreadsheet, case-workspace, sealed JSON or CSV evidence artifacts, or mixed source material, including names, facts, figures, qualifications, evidence gaps, and advisor judgement","id":"source-and-case-material","purpose":"Build a source-faithful presentation","runtime_profiles":["openai-codex","anthropic-cowork","openai-chatgpt","google-antigravity"]},{"content":"Storyline, claims, stable claim and evidence receipt identifiers, dependency edges, evidence bundle and binding records, source hashes, resolved values, slide titles and text, speaker notes, layout choices, content and evidence ledgers, exact hash-bound output appearances written to the shared advisory claim register, workpaper and delivery checkpoints, HTML/CSS, screenshots, and QA findings","id":"deck-work","purpose":"Plan, compose, revise, and review the presentation","runtime_profiles":["openai-codex","anthropic-cowork","openai-chatgpt","google-antigravity"]},{"content":"Editable plans and full source ledgers, resolved evidence values, source labels and hashes, speaker notes, final embedded ledgers, ZIPs, previous content-addressed builds, revision maps, screenshots, print-preview PDFs and browser console diagnostics may enter model context. The publication content ledger omits source locators unless publish_locator is true, but retains source labels, IDs, hashes and slide records; this is field filtering, not automatic anonymisation. Hidden notes and JSON remain readable in the HTML. Bound previous builds are retained until separately removed; the cleanup checker does not enforce filesystem access. A hashed directory and noindex metadata provide neither authentication nor a deletion guarantee.","id":"embedded-and-retained-deck-artifacts","purpose":"Review what the deck contains and preserve exact evidence across revisions","runtime_profiles":["openai-codex","anthropic-cowork","openai-chatgpt","google-antigravity"]},{"content":"When a presentation is imported through the shared case helper and requires normalization, local attempt directories retain converted presentation files and converter stdout/stderr logs. They may contain source document content, metadata and local paths, including after failure or cancellation. Reading them supplies their contents to model context. This conditional import path does not mean every workflow execution converts a presentation or sends these files to a hosted service. Retained attempt files remain until separately removed.","id":"shared-case-normalization-attempts","purpose":"Inspect case presentation imports and any normalization diagnostics used by this workflow","runtime_profiles":["openai-codex","anthropic-cowork","openai-chatgpt","google-antigravity"]}],"policy":"real_case_data_may_enter_selected_runtime_model_context"},"packaged_for_runtime":"openai-codex","public_explanations":{"clara-presentations":{"copy":{"de":["Das Modell liest die Quellen und Prüfunterlagen, die zum Erstellen oder Korrigieren der Präsentation nötig sind.","Das Modell kann Anweisungen, ausgewählte Dokumente und Datendateien, Workpaper, Storyline, Werte und Einschränkungen, Nachweise und Quellenreferenzen, Folienplan, Aussagen und deren Quellenzuordnung erhalten. Bei einer Überarbeitung können außerdem bestehende Präsentation, gerenderte Folien, Feedback, Transkript und Liste der gewünschten Änderungen einfließen.","Der Code setzt Dateien zusammen, rendert und prüft Hashes, Nachweisbindungen und mechanische Vorgaben; er entscheidet nicht über die fachliche Gültigkeit der Aussagen. Die erzeugte Präsentation kann für redaktionelle und visuelle Prüfung erneut vom Modell gelesen werden. Veröffentlichung, Upload oder Weitergabe sind getrennte Schritte und erfolgen nur auf ausdrückliche Anfrage."],"en":["The model reads the sources and review material needed to create or correct the presentation.","The model may receive instructions, selected documents and data files, the workpaper, storyline, values and qualifications, evidence and source references, the slide plan, claims, and the map linking claims to sources. For a revision, it may also receive the existing deck, rendered slides, feedback, transcript, and requested-change list.","Code composes, renders, and verifies files, hashes, evidence bindings, and mechanical constraints; it does not decide whether professional claims are valid. The generated presentation may be read again by the model for editorial and visual review. Publishing, uploading, or sharing is a separate step performed only when explicitly requested."],"es":["El modelo lee las fuentes y el material de revisión necesarios para crear o corregir la presentación.","El modelo puede recibir instrucciones, documentos y archivos de datos seleccionados, el papel de trabajo, la narrativa, valores y salvedades, evidencias y referencias, el plan de diapositivas, las afirmaciones y el mapa que las vincula a las fuentes. En una revisión también puede recibir la presentación existente, diapositivas renderizadas, comentarios, transcripción y lista de cambios solicitados.","El código compone, renderiza y verifica archivos, hashes, vínculos de evidencia y restricciones mecánicas; no decide la validez profesional de las afirmaciones. El modelo puede volver a leer la presentación generada para la revisión editorial y visual. Publicar, cargar o compartir es un paso separado que solo se realiza a petición explícita."],"fr":["Le modèle lit les sources et les éléments de revue nécessaires pour créer ou corriger la présentation.","Le modèle peut recevoir les instructions, documents et fichiers de données sélectionnés, le workpaper, la trame, les valeurs et réserves, les preuves et leurs références, le plan des diapositives, les affirmations et la carte qui les relie aux sources. Pour une révision, il peut aussi recevoir la présentation existante, les diapositives rendues, le feedback, la transcription et la liste des modifications demandées.","Le code compose, rend et vérifie fichiers, empreintes, liens de preuve et contraintes mécaniques ; il ne décide pas de la validité professionnelle des affirmations. La présentation générée peut être relue par le modèle pour le contrôle éditorial et visuel. Publication, envoi ou partage constituent une étape distincte, uniquement sur demande explicite."],"it":["Il modello legge le fonti e il materiale di revisione necessari a creare o correggere la presentazione.","Possono arrivare al modello le istruzioni, i documenti e i file dati selezionati, il workpaper, la storyline, i valori e le qualificazioni, le evidenze e i relativi riferimenti, il piano delle slide, le affermazioni e la mappa che le collega alle fonti. In una revisione possono entrare anche la presentazione esistente, le slide renderizzate, il feedback, la trascrizione e l'elenco delle modifiche richieste.","Il codice compone, renderizza e verifica file, hash, collegamenti delle evidenze e vincoli meccanici; non decide la validità professionale delle affermazioni. La presentazione generata può essere riletta dal modello per il controllo editoriale e visivo. Pubblicazione, upload o condivisione sono passaggi separati e avvengono solo su richiesta esplicita."]},"status":"relevant"}},"review":{"basis":"external_boundary_review_of_workflow_source","reviewed_at":"2026-10-29","reviewed_by":"privacy-surface-review","source_fingerprint":"65e9b8d0fcd4c22ad60772ff1836855df2ba77e769fa5a1dcc40f2796543a392"},"role":"workflow","runtime_profiles":["openai-codex","anthropic-cowork","openai-chatgpt","google-antigravity"],"schema_version":3,"security_controls":[{"control":"Static validation rejects detected remote resource references, external CSS URLs/imports, executable attributes and named dynamic-network/evaluation patterns. These finite syntax checks do not prove that arbitrary JavaScript cannot make network requests. Current browser QA opens a fresh context without a request-interception policy; it is not a network sandbox.","id":"static-resource-and-markup-checks"},{"control":"The embedded content-ledger projection excludes each source locator unless its explicit publish_locator flag is true. It retains source labels, hashes and slide records and does not detect confidential content in those fields.","id":"publication-source-locator-filter"}],"service_ids":["managed-python-runtime","operational-incidents","run-receipt-stamping","workflow-usage"],"source_contract_sha256":"8a12624e01a24f88bf30479fae9d7d62702145c5b3d935985af77740baee8c3d","workstream":"html-deck"}