Secure interchange since 2020
Nexus
How material leaves the institution, when it leaves at all.
The controlled boundary between SENTINEL and everyone else: partner exchange, coordinated disclosure, and Archive publication all pass through it. Nexus enforces the redaction the Disclosure Board approved, and records what was released and when.
Purpose
Control how material leaves the institution — partner exchange, disclosure, Archive publication.
Architecture
- Redaction applied at the boundary
- Every release recorded, dated, attributable
- End-to-end encrypted partner channels
- Publication append-only; withdrawal is a record
Design constraints
- Disclosure Board decisions bind the boundary
- No silent unpublishing
Failure modes
- Side-channel metadata leakage
- Pressure to bypass for convenience
Historical development
Boundary formalised 2020; practices older than the name.
Known limitations
- Cannot release what remains SEALED
- Cannot make QUIETUDE public
We do not claim systems are perfect. We document how they fail.