The private Obsidian vault remains the canonical system of record. Quartz receives only owner-approved, sanitized copies prepared for a specific audience.
Included by explicit approval
- High-level capability descriptions.
- Sanitized project summaries.
- General lessons that do not reveal private operations.
- Separately reviewed diagrams and media.
Excluded by default
- Credentials, tokens, keys, and account identifiers.
- Internal addresses, hostnames, topology, and detailed security rules.
- Recovery procedures, backup locations, and emergency access information.
- Restricted media and private service records.
- Raw screenshots, evidence, archives, and preservation records.
- Notes copied automatically from the full private vault.
Operating rule
A protected website is still a disclosure boundary. Authentication reduces exposure, but it does not replace redaction, explicit selection, or review.