The boundary before the model
Varexis sits between the system and external providers. It detects sensitive data, applies policy, transforms content, rescans residuals and preserves verifiable evidence of what happened.
Structural privacy
The goal is not to trust a provider to handle data well. The goal is for real identities not to need to reach it. Protection and rehydration are separate permissions and the operation fails closed when mandatory protection cannot be demonstrated.