{ "schemaVersion": 1, "version": "2026.10.30.2", "reviewedAt": "2026-10-30", "nextReview": "2026-11-02", "owner": "Dave Morris · Poko", "reviewScope": "Repository and public-policy review, plus a limited non-secret production-metadata check. That check did not establish effective models, customer entitlements, usage, invoices or private agreements. An implemented adapter is not proof that it is enabled or being used by a customer.", "automation": "Weekly Monday 09:00 Australia/Sydney review is implemented on the existing maintenance worker, with register-change and build-release triggers. Production activation is not verified: inspect the protected run evidence before claiming the schedule is active. Bots collect facts; accountable humans record dispositions.", "sources": [ { "id": "S01", "title": "OpenAI · MCP Events", "url": "https://developers.openai.com/plugins/build/mcp-events", "kind": "Provider guidance", "note": "Documents owner-authorised event monitoring with dots; it does not approve every third-party orchestration design." }, { "id": "S02", "title": "OpenAI · Plugin guidelines", "url": "https://developers.openai.com/plugins/plugin-guidelines", "kind": "Provider requirements", "note": "Purpose-specific tools, minimum necessary data, transparent permissions and no reconstruction of the full chat log." }, { "id": "S03", "title": "OpenAI · Dot connections", "url": "https://learn.chatgpt.com/docs/dots/computers-and-apps", "kind": "Provider guidance", "note": "Connected applications and Dot messaging contact methods are different capabilities." }, { "id": "S04", "title": "OpenAI · Dot controls", "url": "https://learn.chatgpt.com/docs/dots/controls", "kind": "Provider guidance", "note": "OpenAI action review, approval and stop controls continue to apply." }, { "id": "S05", "title": "OpenAI · Data controls", "url": "https://developers.openai.com/api/docs/guides/your-data", "kind": "Provider guidance", "note": "Data treatment depends on the API feature and account configuration. Do not transfer API assumptions to Dot or another provider." }, { "id": "S06", "title": "OpenAI · Plugin review", "url": "https://developers.openai.com/plugins/deploy/app-review", "kind": "Provider process", "note": "Private connections and public distribution have different review paths. Review approval and partnership are separate statuses." }, { "id": "P01", "title": "Poko · Privacy", "url": "/privacy/", "kind": "Published Poko policy", "note": "A published commitment; operational evidence must be assessed separately." }, { "id": "P02", "title": "Poko · Data hosting & providers", "url": "/data-hosting-subprocessors/", "kind": "Published Poko policy", "note": "Provider categories and processing-location disclosure; customer-specific details still need reconciliation." }, { "id": "P03", "title": "Poko · Evidence & claims", "url": "/evidence-and-claims/", "kind": "Public register", "note": "Public-claim review; not an independent certification." }, { "id": "P04", "title": "Poko · Standards register", "url": "/standards-register/", "kind": "Public register", "note": "A reference catalogue is not a claim that every standard is achieved." }, { "id": "P05", "title": "Poko · Customer support", "url": "/support/", "kind": "Published Poko policy", "note": "Account, access, service and billing support route." }, { "id": "P06", "title": "Poko · Subscriptions & refunds", "url": "/subscriptions-refunds/", "kind": "Published Poko policy", "note": "Customer charging and cancellation commitments; individual products and third-party allowances may differ." }, { "id": "P07", "title": "Poko · AI project terms", "url": "/openai/terms/", "kind": "Published Poko policy", "note": "Public terms for scoped business AI projects; not evidence of any particular provider agreement." } ], "integrations": [ { "id": "AI-01", "name": "Dot task delegation", "provider": "OpenAI", "group": "openai", "status": "Prototype", "purpose": "A user authorises Poko to send a bounded request to their connected Dot. The intended experience keeps the discussion in Companion.", "account": "Each user's own connected Dot and ChatGPT account.", "data": "An explicit task, selected link and task-specific reports. A whole conversation is not required.", "permissions": "Scoped Poko consent and an owner-authorised monitoring subscription. OpenAI review remains independent.", "cost": "The customer's Dot/ChatGPT allowance is separate from Poko API usage; no API-token price is asserted for a Dot event.", "retention": "Task-specific requests, questions, answers and findings are retained with stable message IDs and ordering. Poko exchange export and redaction are implemented; runtime receipts, conversation history and OpenAI-held copies have separate lifecycle controls. New request records have a 90-day storage TTL; a 24-hour redacted tombstone blocks delayed callbacks after deletion. The recent-history index is bounded.", "evidence": "Source implementation includes owner-scoped names, standing opt-in for automatic read-only public-link delegation, task-level context sharing, retained reports and local cancellation limits. See protected run/test evidence for validation; no real-Dot production acceptance is established.", "gap": "Delegation is restricted to enabled internal Poko preview reviewers while the precise provider scope and launch review remain open. Named routing and the retained task exchange have local fixture evidence; real-Dot production acceptance and OpenAI approval are not established.", "sources": [ "S01", "S02", "S03", "S04" ], "owner": "Poko engineering · Dave accountable" }, { "id": "AI-02", "name": "OpenAI API connection", "provider": "OpenAI", "group": "openai", "status": "Implementation found", "purpose": "Brain can make authorised text-model requests through an OpenAI provider adapter.", "account": "A scoped provider connection. Credential ownership and the funding path must be checked for each offering.", "data": "Selected model messages, tool context and generated output pass through the Poko gateway to the configured provider.", "permissions": "Account-owned connections and execution profiles; permissions are checked at execution.", "cost": "Provider usage and Poko customer charges are distinct records. Current spend and invoice reconciliation were not inspected.", "retention": "Poko records and provider-side API data controls are separate. Effective account settings and end-to-end deletion need confirmation.", "evidence": "Provider probe, chat-completion and Responses paths exist in the inspected source. Current account use was not measured.", "gap": "Reconcile enabled models, actual provider account, data controls and current usage evidence before making customer-specific claims.", "sources": [ "S05", "P01", "P02" ], "owner": "Poko engineering · Dave accountable" }, { "id": "AI-03", "name": "ChatGPT plan connection", "provider": "OpenAI", "group": "openai", "status": "Conditional", "purpose": "A separately configured path for eligible ChatGPT-plan-backed requests.", "account": "User-owned plan connection; production client eligibility and permissions must be established.", "data": "Authorised request context and output, using the selected plan connection.", "permissions": "Conditional client enablement and account authorisation. A configured UI is not proof of provider eligibility.", "cost": "Plan allowance and any Poko commercial offering require their own terms assessment; not assumed equivalent to API billing.", "retention": "Plan-specific treatment must be confirmed. API retention assumptions are not applied automatically.", "evidence": "Eligibility checks and an authorisation/exchange path exist in source; current production approval was not reviewed.", "gap": "Record the actual approved client scope and relevant terms before advertising availability.", "sources": [ "P01", "P02" ], "owner": "Poko integration review · Dave accountable" }, { "id": "AI-04", "name": "Codex execution", "provider": "OpenAI", "group": "openai", "status": "Implementation found", "purpose": "Local and paired-PC execution paths support explicitly configured coding work.", "account": "The user's connected computer and its authorised Codex session.", "data": "Selected task instructions, workspace context, approvals and task artifacts may reach the connected execution environment.", "permissions": "PC pairing, account ownership, available workspace and per-action approvals remain applicable.", "cost": "The relevant Codex account/allowance is distinct from Poko hosted-model usage.", "retention": "Local files, Poko task records and provider-side task history have separate lifecycles; no blanket deletion claim is made.", "evidence": "Personal-PC connection and task/approval/artifact adapters are implemented. Limited startup checks on an owner-controlled device do not establish qualification of all customer devices or workflows.", "gap": "Document supported task scope and the actual user/device data lifecycle for each enabled deployment.", "sources": [ "P01", "P02", "P05" ], "owner": "Poko engineering · Dave accountable" }, { "id": "AI-05", "name": "AI-assisted development", "provider": "OpenAI", "group": "openai", "status": "Development use", "purpose": "Codex is used to investigate, implement and review changes in this repository.", "account": "An authorised development session; distinct from a customer's runtime model account.", "data": "Task-relevant source and development evidence. Secrets and customer data are excluded from public audit material.", "permissions": "Repository instructions, scoped tool access and shared validation/release controls.", "cost": "Development tooling allowance is not represented as customer model usage.", "retention": "Source-control, development-session and operational-evidence retention differ; no provider-wide claim is made.", "evidence": "This audit and the Dot prototype were developed through a Codex session. A bot's own output is not independent assurance.", "gap": "Maintain reviewer attribution and distinguish implementation evidence from independent review.", "sources": [ "P03" ], "owner": "Dave · development owner" }, { "id": "AI-06", "name": "Anthropic connection", "provider": "Anthropic", "group": "other", "status": "Implementation found", "purpose": "Brain has a provider adapter for authorised Claude-family requests.", "account": "User/account-scoped provider credentials; current funded accounts not inspected.", "data": "Selected messages and tool context are sent to the provider; output returns through Poko.", "permissions": "Configured connection, enabled model and account execution authority.", "cost": "Provider usage and Poko charges must be disclosed separately; current rates/spend not reviewed.", "retention": "Provider-specific data terms and settings require review; OpenAI data rules do not substitute for them.", "evidence": "Provider probe and message-generation branches exist in source. No live-use claim is made.", "gap": "Confirm enabled models, effective terms, processing regions and deletion behaviour for the actual account.", "sources": [ "P01", "P02" ], "owner": "Poko provider review · Dave accountable" }, { "id": "AI-07", "name": "Gemini connection", "provider": "Google", "group": "other", "status": "Implementation found", "purpose": "Brain has a provider adapter for authorised Gemini requests.", "account": "User/account-scoped provider credentials; current deployment use not inspected.", "data": "Selected messages and context go to the configured generation service.", "permissions": "Connection ownership, model availability and task scope.", "cost": "Actual account usage, quotas and Poko billing need reconciliation.", "retention": "Effective Google account/service data terms must be assessed independently.", "evidence": "Provider probe and content-generation branches exist in source; live account evidence is absent from this review.", "gap": "Verify exact account type, data treatment, enabled model identifiers and customer disclosures.", "sources": [ "P01", "P02" ], "owner": "Poko provider review · Dave accountable" }, { "id": "AI-08", "name": "OpenRouter connection", "provider": "OpenRouter + selected downstream provider", "group": "other", "status": "Implementation found", "purpose": "Brain can route authorised model requests through a model-routing provider.", "account": "A scoped OpenRouter connection and the actual downstream route.", "data": "Selected task context can pass through the router and a downstream provider.", "permissions": "Account connection and selected routing policy; a provider alias does not identify every downstream destination.", "cost": "Router/provider charges and Poko customer pricing are distinct; actual route/spend not inspected.", "retention": "Assess both router and downstream provider terms, settings and processing locations.", "evidence": "Provider authentication probe, completion path and provider usage handling exist in source.", "gap": "Capture the actual downstream model/provider for a run and make any routing/privacy constraints explicit.", "sources": [ "P01", "P02" ], "owner": "Poko provider review · Dave accountable" }, { "id": "AI-09", "name": "Poko hosted-model gateway", "provider": "Configured inference backend", "group": "other", "status": "Implementation found", "purpose": "Poko chat and task services use configured standard, deep and instant inference paths.", "account": "Poko-operated backend configuration, separate from a user's external provider connection.", "data": "Task instructions and authorised retrieved context are forwarded to the configured backend.", "permissions": "Poko task/account controls and backend authentication.", "cost": "Poko hosting/inference cost and customer pricing require separate measurement.", "retention": "Poko task/storage controls and inference-host logs must be reconciled against the deployed configuration.", "evidence": "Source wires configured HTTP inference providers. On 30 October 2026, a scoped installed Brain startup check returned output from four selected Poko-hosted models, with matching requested/served identities, usage and execution records. This is not whole-product acceptance or licence approval.", "gap": "Verify runtime model identity, licences, hosting location, retention and real usage before claiming a particular model powers a customer request.", "sources": [ "P01", "P02", "P05" ], "owner": "Poko platform engineering · Dave accountable" }, { "id": "AI-10", "name": "Embeddings & retrieval", "provider": "Configured backend; local Nomic adapter also present", "group": "other", "status": "Implementation found", "purpose": "Convert selected text to vectors for retrieval/classification where configured.", "account": "Poko backend configuration; local implementations have a separate lifecycle.", "data": "Text selected for embedding and resulting vectors. Vectors are not assumed anonymous.", "permissions": "Source-resource access and embedding endpoint authority.", "cost": "Configured inference/hosting costs; not assumed to be an OpenAI embedding charge.", "retention": "Source text, vectors, indexes and logs need linked deletion and retention rules.", "evidence": "A configured HTTP embedding service and a local Nomic implementation exist in source. Exact deployed provider/model not verified.", "gap": "Verify index ownership, deployed model, processing location, vector retention and deletion propagation.", "sources": [ "P01", "P02" ], "owner": "Poko retrieval engineering · Dave accountable" }, { "id": "AI-11", "name": "Speech transcription", "provider": "Configured speech/backend service", "group": "other", "status": "Implementation found", "purpose": "Transcribe authorised audio for supported recording/conversation flows.", "account": "Configured Poko backend; not presumed to be OpenAI Realtime or an OpenAI API account.", "data": "Selected audio and returned transcript, with different storage lifecycles.", "permissions": "Audio collection authority, account/task scope and backend authentication.", "cost": "Audio processing and hosting basis require deployment-specific confirmation.", "retention": "Audio, transcripts, derived artifacts and worker logs must be assessed separately.", "evidence": "Speech proxy and Crowd transcription adapters are present. Scoped owner-authorised recorded private practice passed local transcription on 30 October 2026. Live-room and on-air acceptance remain open; a session token is not evidence of OpenAI Realtime use.", "gap": "Verify the actual speech model/provider, consent, retention and resource ownership for each enabled workflow.", "sources": [ "P01", "P02" ], "owner": "Poko media engineering · Dave accountable" }, { "id": "AI-12", "name": "Image, voice & additional AI services", "provider": "Coverage review", "group": "other", "status": "Coverage gap", "purpose": "Check for additional enabled AI generation, voice, moderation, model-hosting and third-party automation paths.", "account": "Not established by the initial inventory.", "data": "Do not assume a data flow from a package name, stored image or realtime label.", "permissions": "Must be assessed if an active service is identified.", "cost": "No additional provider spend or price is asserted.", "retention": "No service-specific conclusion is available yet.", "evidence": "The inspected paths do not establish a complete inventory of every runtime feature or customer account.", "gap": "Finish the deployment/usage reconciliation and add any verified additional services with evidence.", "sources": [ "P02", "P03" ], "owner": "Poko inventory review · Dave accountable" } ], "boundary": [ { "label": "Authorised starting point", "status": "Documented pattern", "text": "The owner connects Poko, asks their Dot to monitor defined Poko requests, and specifies the permitted work. Connecting a plugin alone is not a monitoring instruction.", "source": "S01" }, { "label": "Poko chooses Dot", "status": "Design under review", "text": "The intended design lets Poko propose Dot when it fits the task, within the owner's standing delegation policy. The server must check authority and connection state. This precise orchestration is not represented as OpenAI-approved.", "source": "S01" }, { "label": "Context shared", "status": "Required boundary", "text": "Only the bounded instruction, selected resources and necessary task context. No full-history mirroring, unrelated workspace content, secrets or hidden reasoning.", "source": "S02" }, { "label": "Questions & follow-ups", "status": "Scoped interpretation", "text": "Retain messages intentionally exchanged about that Poko task. A user answer can continue the same task; it is not a general Dot chat channel or an OpenAI platform approval.", "source": "S03" }, { "label": "Approvals & stopping", "status": "Provider controls apply", "text": "OpenAI's checks remain effective. Poko permission is not a substitute for a platform approval. Disconnecting stops future Poko access/delivery; already received work may need to be stopped in ChatGPT.", "source": "S04" }, { "label": "General availability", "status": "Review gate open", "text": "Resolve the exact delegated scope, validate the actual connection and data lifecycle, and complete private live acceptance before describing the integrated experience as available.", "source": "S06" } ], "responsibilities": [ { "title": "Know who is doing the work", "current": "The audit separates Poko's configured agents, external providers and user-owned Dot accounts.", "next": "Show the actual provider/model or agent destination for a task. Customer nicknames must retain their underlying identity.", "url": "/evidence-and-claims/" }, { "title": "Control what leaves your account", "current": "Published privacy boundaries and account-scoped connection/runtime code provide a starting point.", "next": "Confirm effective context selection, external-sharing permission and isolation for each enabled journey.", "url": "/privacy/" }, { "title": "Understand storage & deletion", "current": "Public policy describes storage/provider categories; integration lifecycles differ.", "next": "Reconcile effective retention, audio/vector/artifact copies, exports and deletion propagation. Do not promise one retention period for every provider.", "url": "/data-hosting-subprocessors/" }, { "title": "Understand what you pay for", "current": "Poko subscriptions, project terms and external account allowances are separate funding paths.", "next": "Confirm disclosed units, quotas, limits, failed-work charging, cancellation and refund treatment for each offering.", "url": "/subscriptions-refunds/" }, { "title": "Recognise a reported result", "current": "The Dot prototype distinguishes delivery from Dot-reported completion. Existing assurance documents distinguish code, tests and live evidence.", "next": "Attach appropriate evaluation and verification evidence; avoid accuracy, savings or safety claims unsupported by the measured scope.", "url": "/evidence-and-claims/" }, { "title": "Have an accountable support route", "current": "Poko publishes a customer support and complaints route.", "next": "Confirm incident triage, provider escalation, affected-customer communication and accountable ownership across AI offerings.", "url": "/support/" }, { "title": "Keep service boundaries clear", "current": "Poko's scope and legal/safety pages document its service boundaries.", "next": "Check prompts, tools and public claims against those boundaries, including sensitive and high-impact use cases.", "url": "/scope-of-support/" }, { "title": "See what is still uncertain", "current": "This public register exposes unverified deployment facts, provider questions and evidence gaps.", "next": "Keep dated records and reviewed dispositions. A green-looking interface or an AI-generated assessment is not certification.", "url": "/standards-register/" } ], "issues": [ { "id": "AUD-01", "title": "Confirm the exact Dot orchestration scope", "severity": "Release gate", "state": "Open", "detail": "Published guidance supports owner-authorised event monitoring. Provider confirmation of Poko-model-selected delegation and this specific follow-up design is not established. No clarification request has been sent by this audit task.", "owner": "Dave · integration review", "due": "Before general availability" }, { "id": "AUD-02", "title": "Reconcile implemented adapters with actual deployment", "severity": "Evidence needed", "state": "Open", "detail": "Complete the enabled-model, account, entitlement, licence, effective region, retention and usage review. This initial inventory records implementation evidence without inventing live adoption or spend.", "owner": "Poko engineering", "due": "Before deployment-specific claims" }, { "id": "AUD-03", "title": "Substantiate public affiliation language", "severity": "Claim review", "state": "Open", "detail": "The public OpenAI services page uses Partner language; older application collateral records an earlier unconfirmed status. This audit has not reviewed the current supporting agreement or programme evidence. Neither historical document alone determines today's relationship.", "owner": "Dave · public claims", "due": "Current evidence review" }, { "id": "AUD-04", "title": "Verify the complete customer data lifecycle", "severity": "Evidence needed", "state": "Open", "detail": "Check context sharing, task history, audio, vectors, exports, deletion, provider-held data and incident escalation against each current funding and deployment path.", "owner": "Poko operations + privacy review", "due": "Before offering-specific assurances" }, { "id": "AUD-05", "title": "Make recurring review observable", "severity": "Operational gap", "state": "Open", "detail": "The recurring reviewer, protected run evidence, expired-lease/missed/failed-run flags and human disposition workflow are implemented using existing maintenance and storage. Production activation and observed scheduled success/failure remain to be verified after the shared deployment.", "owner": "Dave · operations", "due": "Before claiming continuous automated review" }, { "id": "AUD-06", "title": "Complete real-Dot acceptance", "severity": "Release gate", "state": "Open", "detail": "The direct-send prototype has dated fixture test evidence. Real two-account Dot acceptance, integrated follow-ups and production verification remain outstanding; this task does not implement the later routing stages.", "owner": "Poko engineering", "due": "Before general availability" } ], "history": [ { "date": "2026-10-30", "title": "Public audit baseline", "text": "Reviewed selected provider/runtime source, existing assurance collateral and public policy pages. Added the initial provider inventory, Dot boundary assessment, customer responsibilities and explicit open issues. No production account, invoice or private provider agreement inspection is claimed." }, { "date": "2026-10-30", "title": "Dot prototype evidence", "text": "The earlier implementation handover records focused backend/UI/routing tests, a shared build and backend typecheck. Its full web check encountered unrelated shared-tree typing errors. Those are dated receipts, not evidence of current deployment or OpenAI approval." }, { "date": "2026-10-27", "title": "Governance & assurance collateral", "text": "Technical and governance documents were prepared with supporting evidence and standards registers. They distinguish policy commitments, implementation, dated test evidence and outstanding assurance. Preparation does not establish independent certification." }, { "date": "2026-10-30", "title": "Named delegation, retained task exchange and operational reviewer implementation", "text": "Implementation and validation in progress. No production activation or provider approval asserted." } ] }