---
title: "Every run has a receipt, and the boundary is stated."
seo_title: "Lineage, receipt, and the declared boundary of every delivery | SazAI"
description: "Every run records where it came from and what it produced, the boundary is stated, and five proofs precede signing."
tags: [marketing, dimensao/confie]
icon: check
---

> Whoever answers to an auditor does not need a promise, they need a record the auditor can open alone. Every run of SazAI Corpus records where it came from and what it produced, and this page also states where that coverage ends.

<div class="chap">

<div class="ico-col"><sz-icon style="color:var(--verb-trust)" name="check" size="36"></sz-icon></div>

<h2 id="what-is-recorded">What gets recorded</h2>

<h3 class="sub">Every run records where it came from and what it produced, step by step</h3>

Every run leaves a trace per step: which file went in, what each stage produced, what
failed and why, how much it cost. <dfn data-hint="The record of which file produced what, stored as a column in the database rather than as a naming convention.">Lineage</dfn> is a column, not a convention: *this
file came from that one* is verifiable by query, not by trust. Failed work is recorded
too, and billed the same as work that passed, which is the hardest claim on this page to
fake. Comparing versions is the part of the trace used most, and it is counted:

<figure class="viz" role="group" aria-label="One thousand nine hundred and one comparison findings measured across the four formats, in fourteen runs">
<div class="ev proof"><span class="n">1,901</span><span class="t"><b>Comparison findings, counted across the four formats</b>267 in PPTX, 167 in DOCX, 338 in XLSX, and 1,129 in PDF, across fourteen comparison runs. It is not a sample or an estimate: it is what the engine recorded, and the number comes back the same for anyone who repeats the query.</span></div>
<figcaption>Measured against our own database on 2026-08-28. This page's receipt is the page itself: the number is here because it can be reproduced.</figcaption>
</figure>

The full trace of a document, the X-ray, the editions, and what each receipt proves, is in
[your documents](documents).

</div>

<div class="chap">

<div class="ico-col"><sz-icon style="color:var(--verb-trust)" name="info" size="36"></sz-icon></div>

<h2 id="receipt-edge">The receipt has a boundary</h2>

<h3 class="sub">How far lineage covers, and exactly where it stops</h3>

Lineage follows every passage of text until it leaves for the language model, and picks
back up when it returns. No table of ours records what happened on the other side.
Anyone who asks *prove what was done with my text inside the model* receives the
retention terms of the provider they contracted, and in an installation of your own the
provider is your choice. Stating where the receipt ends is part of the receipt, and it is
the sentence this page exists to never leave unsaid.

<figure class="viz edge" role="group" aria-label="Lineage covers from intake through submission; at the provider the line breaks and stays open">
<span class="seg on"></span><span class="cut">the provider begins here</span><span class="seg off"></span>
<div class="lbl"><span><b>covered by lineage</b>upload, extraction, measurement, editing, output</span><span></span><span><b>outside our boundary</b>text sent to the model follows the provider's terms</span></div>
<figcaption>The line breaks on purpose. An unbroken line here would say in geometry what the sentence is not allowed to say.</figcaption>
</figure>

</div>

<div class="chap">

<div class="ico-col"><sz-icon style="color:var(--verb-trust)" name="book" size="36"></sz-icon></div>

<h2 id="privacy-child">The properties you audit</h2>

<h3 class="sub">Where the data lives, what leaves your zone, and what deletion proves</h3>

Permanent storage does not hold document content: it holds structure, measurement, and
lineage, and the way to check that is not to read a policy, it is to audit the schema.
Deletion here is called <dfn data-hint="The document leaves your vault and its derivatives, and sensitive content is erased; backup copies can take up to seven days to catch up.">withdrawal</dfn>, because erasure would claim a reach that no
system with backups and providers in the path can sustain, and changing the word was
cheaper than sustaining the promise. The full argument, the schema, the two boundaries of
the control zone, deletion with proof, and portability, live in
[privacy and sovereignty](privacy).

</div>

<div class="chap">

<div class="ico-col"><sz-icon style="color:var(--verb-trust)" name="settings" size="36"></sz-icon></div>

<h2 id="platform-child">The platform underneath</h2>

<h3 class="sub">Written decisions, methodical validation, and the roadmap with no verb in the present tense</h3>

Every capability answers three questions: is there a written decision that governs it, is
there a measurement, or does it simply work without anyone having written down why. What
passes the first two is a receipt; the rest is declared as direction, dated and with no
verb in the present tense. The decisions, the references behind each block, and the
roadmap of what does not exist yet are in [platform](platform).

</div>

<div class="chap">

<div class="ico-col"><sz-icon style="color:var(--verb-trust)" name="warning" size="36"></sz-icon></div>

<h2 id="not-here">What we recommend you do not do here</h2>

<h3 class="sub">A product contract needs a declared end</h3>

Do not use SazAI to reconstruct a document's structure: the engine changes content inside
the structure that already exists, and does not create, delete, or reorder units. Do not
treat assisted creation as final delivery: it is the least mature operation in the set
and requires human review. Do not count on PDF translation into every language: targets
the design does not yet support are refused or flagged at selection, never after
delivery. Do not expect automatic visual verification: the system measures structure and
counts elements, and the last look at the page is human. And do not use the receipts as
certified audit: they are evidence of control, and whether they close a formal
requirement in your sector is a case by case conversation, with the requirement on the
table.

Refusing in silence is worse than warning. A limit that stops existing leaves here with a
date, and becomes a line on the page that mediates it.

</div>

<div class="chap">

<div class="ico-col"><sz-icon style="color:var(--verb-trust)" name="search" size="36"></sz-icon></div>

<h2 id="prove-it">Prove it, do not take our word</h2>

<h3 class="sub">Five things you can demand before signing anything</h3>

Five things you can demand in an evaluation, and none of them depend on our word: the
receipt of a delivery of yours, item by item; the lineage of which file produced what;
the schema, to audit where the data lives; the boundary, declared by us and not
discovered by you; and the withdrawal, executed, with what it does not reach. Ask for the
export and open it in your own tool; ask for a key and call the API yourself; upload a
document of your own, translate and compare it, and get the count before and after. If
any one of these cannot be carried out in an evaluation of your own, that is a defect of
ours, and we want to know before you do.

<figure class="viz" role="group" aria-label="Five demands a buyer can make before signing">
<div class="five">
<div><b>The receipt</b>of a delivery of yours, item by item</div>
<div><b>The lineage</b>of which file produced what</div>
<div><b>The schema</b>to audit where the data lives</div>
<div><b>The boundary</b>declared, not discovered by you</div>
<div><b>The withdrawal</b>executed, and what it does not reach</div>
</div>
<figcaption>Five demands, and none of them ask for trust.</figcaption>
</figure>

Whoever answers is whoever builds, and there is one address: [contact](contact). This is
what the other four verbs stand on: what you [see](see), [ask](talk), [translate](translate),
and are about to [create](create) passes through here and leaves a trace.

</div>

<style>
/* THE RECEIPT HAS AN EDGE, AND THE FIGURE HAS TO DRAW THE EDGE RATHER THAN THE PROMISE.
   Trait 3 forbids the sentence "end to end through the model", so a figure that draws one
   unbroken span would say in geometry exactly what the prose is forbidden to say. The covered
   run is solid; where the provider begins, the line BREAKS and continues open. Same move the
   `/platform` curve makes with PDF: the break is the argument, not a blemish on it. */
article .edge{display:grid;grid-template-columns:1fr auto 1fr;align-items:center;gap:.8rem}
article .edge .seg{height:8px;border-radius:4px}
article .edge .seg.on{background:var(--verb-trust)}
article .edge .seg.off{background:transparent;border:1.5px dashed color-mix(in srgb,var(--gray) 55%,transparent)}
article .edge .cut{font-size:var(--fs-xs,.74rem);letter-spacing:.06em;text-transform:uppercase;color:var(--gray);white-space:nowrap}
article .edge .lbl{grid-column:1/-1;display:grid;grid-template-columns:1fr auto 1fr;gap:.8rem;font-size:var(--fs-xs,.76rem);color:var(--gray)}
article .edge .lbl b{display:block;color:var(--text);font-size:var(--fs-sm,.86rem)}
article .edge .lbl :last-child{text-align:right}
article .five{display:grid;grid-template-columns:repeat(5,1fr);gap:.7rem}
article .five div{border-left:2px solid var(--verb-trust);padding-left:.6rem;font-size:var(--fs-xs,.78rem);color:var(--gray);line-height:1.4}
article .five b{display:block;color:var(--text);font-size:var(--fs-sm,.85rem);margin-bottom:.1rem}
@media (max-width:640px){article .five{grid-template-columns:1fr 1fr}article .edge,article .edge .lbl{grid-template-columns:1fr}}
</style>
