About
Evidence before action
Every operational path starts with read-only inspection, labels the scope of its evidence, and identifies who controls the next change.
Evidence labels
- Authoritative: defined by a standard, registry, operator, or official provider source.
- Observed: returned by a named tool, resolver, or endpoint at a recorded time.
- Inferred: a conclusion drawn from one or more observations.
- Recommended: an editorial judgment with explicit tradeoffs.
Source order
Standards and RFCs come first, followed by IANA, ICANN, root-system operators, registry policy, official provider documentation, reproducible tests, and carefully selected secondary explanations.
Operational contract
Risky guidance identifies the responsible owner, blast radius, inventory, preflight, stop conditions, verification, and rollback. One resolver response is never described as global DNS state.