1 · Submit · client-side encrypted
URL hashed in your browser via SubtleCrypto · only the cipher leaves this tab.
data residency · us-central1 (single region)
Spec stays in your project. No cross-region replication. No backups.
2 · Pipeline · per-stage trust labels
Spec extract · Gemini ADKScrubbed prompt; no PII; vendor: Google (DPA signed).
trusted · no-train
Codegen · Agent BuilderOutputs Next.js source & design tokens, in your VPC-SC perimeter.
trusted
Deploy · Cloud Run (private)Signed URL · 24h TTL · ingress: internal-and-cloud-load-balancing.
trusted · ephemeral
Phoenix MCP · trace + judgeDefault: Phoenix Cloud (external). Switch to self-hosted below to keep traces in-region.
external by default
3 · Trace export · what leaves your project
span.name whyc.spec.extract
span.kind LLM
attributes:
input.value [REDACTED · 412 bytes] // scrubbed before export
input.hash sha256:0x9c4e…b71 // receipt only
company.name [REDACTED] // stealth-mode rule #1
founder.email [REDACTED] // stealth-mode rule #2
spec.shape { pages:3, apis:2, persona:"…" } // shape only, no values
judge.score 0.71
judge.notes "hero copy generic; CTA spec-fit low"
model.name gemini-2.x-pro
model.dataLogging false
events:
- redaction.applied { rules: ["yc.batch","founder.pii","company.dn"] }
Self-hosted Phoenix · keep traces in your region
Ephemeral preview · auto-revokes
https://whyc-prv-7g3k.run.app
signed v4 url · ingress: private · image: deleted at T+24h
23:47:12
until URL revoke
Receipts & proofs
Run manifestJSON of every redaction rule + key fingerprint, signed by run-id.
download
Deletion attestationIssued at T+24h · proof Cloud Run image & logs are gone.
auto
Spec-fit log (k-anonymized)Score progression 71→84→92→96 · no input values stored.
k=5
Threat model · plain English
- WhyC operators cannot read your URL — only its hash & redacted spec shape.
- YC company being parodied cannot link a preview back to a real submitter (no hostname leak in trace).
- Phoenix Cloud can see span shapes; switch to self-hosted to remove that exposure.
- Hackathon judges see only what you publish in your 3-min video.