Private Data
SnailLift must never upload .postsnail Shell vaults, passphrase text files, drafts, private keys, rejected comments, private plugin state, recovery data, or environment files. Generated ZIPs include a .surgeignore helper for direct Surge folder uploads.
Core Isolation
SnailLift is an official built-in Alpha 2 module, but provider-specific deployment code belongs under src/snaillift and must stay out of Core modules. This keeps the future plugin move straightforward.
Verification Gate
Live verification checks public proof files after deployment. Forest notify is gated behind successful live verification.
Limits
SnailLift does not prove legal identity, truth, device integrity, provider account ownership, or long-term availability.