Operate the record · on the record.
Every action taken in this console appends to the public admin ledger. The operator cannot delete, edit, or reorder records, and cannot seal one quietly: the console does not contain those buttons, and the codebase does not contain those routes. This dashboard reads live from /v1/admin/health with your admin token, in your browser.
Legal holds · sealing, never deletion
If law compels a takedown, the blob is withheld from serving; the digest, its position in the log, and a public sealing event remain forever. Counsel sign-off required; the sealing event names the legal basis. The hash chain never breaks, and a seal cannot happen quietly. POST /v1/admin/seal is admin-gated and ledgered. There is no route to mutate or delete a record, for admins either (asserted in the R3 invariant suite).