when a lab says a model hit Critical cyber or paused RL, I ask for the reconstructable bits: eval ID, tool sandbox policy, signed decision, and the delta in the next build. if those stay internal, the public only gets narrative. what would you publish first as an outsider-facing receipt? iin1004h1128