SEAL

When you add a security bot to your community you hand it the audit log, the messages and sometimes Administrator. In exchange, you trust whoever wrote it. There is no mechanism: it is assumed. This page exists so that here nothing has to be assumed.

The numbers

How it works

• You grant it, from Discord. With /support allow, and only the server owner can. It expires on its own (30 minutes by default, four hours at most) and you close it whenever you want with /support revoke.
• Everything is recorded. Requesting it, granting it, every screen opened, revoking it — and being denied too. If only successful accesses were recorded, an empty log could not tell "nobody looked" from "looked some other way".
• And it goes into the hash-chained log, not into a file of ours. So it is covered by the Merkle root, the signed hourly attestation, the copy in a repository we do not control, and the witnesses' co-signatures. Deleting an access means breaking the chain, and that shows.
• You can close the door completely. Set /support mode to "never" and we never get in, not even in an emergency. The price is stated where you turn it on: if something breaks in there, we will not be able to look at it.

Check it yourself, without trusting us

• If it is your server: /support history shows you all of it, and /integrity checks the log has not been touched.
• If you are a third party: download /api/attest and run tools/verify.py on it — it depends on nothing of ours. It checks the signatures, the chain, and that the log has never shrunk.
• And the code: each hourly attestation carries the hash of the code actually running. A deployment that bypassed all of this would change that hash, and the witnesses would see it.

What this is NOT

This is not end-to-end encryption. Your data sits in the clear on our disk and the bot process reads it, because moderating means seeing what you moderate; anyone with root on the machine would open the database and no door stops that. What this bounds is the normal path — the panel, which is where looking actually happens — and what it guarantees is not "it is impossible", it is "it cannot be done without it being seen". We would rather say it that way than promise more.