Status.

Live check: HTTPS GET /api/health from your browser. Reflects what you can reach right now, not a global view.

No counts, no IDs, no addresses. State is derived from the public audit log root, a sweeper heartbeat, and whether the mail provider is configured. The threat model has the full picture of what each signal means.

Self-reported. Computed from incidents.json in the public repo. Days with no recorded incident are shown as operational. We do not run a third-party uptime monitor against ourselves yet — when we do, this will switch to its data.