Demo data
Isolated training fixtures. No real targets or live scans.
SAFETY / SCOPE GUARD
Scope manager
A deterministic server gate—not an AI opinion—decides whether research is authorized.
Asset authorization map
Research portal
https://portal.nexus-lab.test
Exact asset is authorized for offline evidence inspection.
Public API
https://api.nexus-lab.test
Exact asset is authorized for offline evidence inspection.
Documentation
https://docs.nexus-lab.test
Exact asset is authorized for offline evidence inspection.
Billing service
https://billing.nexus-lab.test
OUT OF SCOPE: testing is blocked.
Enforcement controls
Exact HTTPS asset allowlist
Human-verified source and expiry
Prohibited assets override allowlist
Unknown scope is blocked
No wildcard or subdomain inheritance
No redirects or external network requests
One sanitized capture per job
No credentials or response bodies
Server-enforced emergency stop
Human verification before approval
Ambiguity means stop.
Conditional policy language, unknown scope, expired authorization, and unsupported IP ranges require human clarification.
Review program policies