Privacy shaped the architecture:
private by default
redact before analysis
retain only approved examples
store the recipe, not a permanent activation tensor
separate private records from public projections
let creators unpublish without deleting their capsule