TZUR Impact — Technical Architecture

Frontend: static HTML/CSS/JavaScript, with guided marketing demo and the full /workspace evaluation application. No generative AI inference is used for the deterministic analysis.
API: Cloudflare-compatible Worker. GET /api/scenarios and /api/session; POST /api/analyze; signed-in case, review and export endpoints.
Engine: validates bounded input, normalizes supplied synthetic AWS Config JSON, follows directed graph edges and returns one deterministic shortest path per reachable node.
Scoring: illustrative severity, mission criticality and proximity rule; capped at 100. Not a probability, calibrated mission risk or authorization verdict.
Comparison: baseline/current snapshots for the same authorization identity. Control association is review context, not a passed/failed control determination.
Persistence: D1 stores explicitly saved cases and append-only human review records. Every case/review/export operation checks owner identity. ChatGPT sign-in is supplied by the Sites dispatcher; do not trust these identity headers on a standalone exposed Worker.
Provenance: canonical SHA-256 hashes detect modified bytes against a separately trusted copy, not authenticity.
Limits: 250 KB request body, bounded graph/JSON complexity, 200 saved cases per user. No live ingestion, enterprise SSO/RBAC, deletion UI, verified backup/restore exercise, SLA or production acceptance.
Data boundary: synthetic and non-sensitive only.
Contact: hello@llcreativityllc.com.