# submissions/

The hypothesis the memo wants tested is that the delta — what you authorised and never asked for — is enormous for almost everybody. It deserves to be falsifiable, so this folder holds the submission format and nothing is collected any other way.

A submission is **counts only**: a profile set, the count of grant and mandate capabilities by family, and the count of irreversible capabilities outside the mandate. No paths, no hosts, no names, and no obligation. Submissions are pull requests, so anybody can see what was submitted and by whom, and the aggregate is computed in the open.

Shape: `schema.json`. The `authorised/` page shows you the exact tuple before you decide; it has no button that sends it anywhere.

**If the median delta comes back small, the hypothesis is wrong, and that is worth knowing more than a confirmation would be.** The aggregate will be published as it accumulates, either way. Today it is empty.