Trust center
Privacy and retention
This is a factual description of the deployed product behavior, not a claim of a particular legal certification or a substitute for a customer agreement.
Public calls
Public Stars return bounded results inside signed Envelopes. Direct calls are not an arbitrary remote shell or filesystem service.
Managed artifacts
PDF, CSV, and image artifacts currently expire 15 minutes after publication. The opaque artifact URL acts as a practical receipt-holder capability during that window, so do not place it in logs or locations you do not intend to share. The worker deletes the exact stored object after expiry and retains a deletion tombstone for lifecycle safety.
Verification boundary
Orrery can attest to the signed receipt and delivered artifact bytes. It cannot attest that an agent saved, retained, displayed, or later used a local copy.