Workflow software connecting outside signals to an operator's review and response systems
Altitude — inspected public implementation
Altitude is an open-source moderation-workflow tool developed with Google Jigsaw collaboration and placed under announced Tech Against Terrorism stewardship in July 2024. The examined public implementation is pinned to 8 August 2024 and combines source signals, prioritisation, human review and delivery of review verdicts.
What the inspected implementation does
The TCAP adapter imports URL-alert metadata. A confidence heuristic treats TCAP as trusted, but a separate severity component also affects priority; neither value is a calibrated probability or verdict. Reviewed decisions are scheduled for publication and sent to a configured receiver, or written to a local log when no receiver exists. Optional diagnostics can return decision information. These are static findings from the pinned source, not observed customer behaviour. Apache 2.0 software rights do not grant access to TCAP or GIFCT credentials.
Altitude — inspected public implementation → Altitude verdict delivery and local-log fallback
contains a generic source-redaction hook but no demonstrated restoration chain
2024-08-08 – 2024-08-08
Generic importer can call source-specific redaction on DELETE; the method implementation was not read. Inspected TCAP adapter yields UPDATE_OR_INSERT and its ACT/INA means URL availability, not withdrawn classification. Different interfaces/versions preclude treating this as failure of the current hash-deletion API.
Altitude — inspected public implementation → Terrorist Content Analytics Platform
can return optional URL and decision diagnostics
2024-08-08 – 2024-08-08
Export requires diagnostics active and maps BLOCK to REMOVE. Selection uses the latest review in the interval without the inspected condition requiring published state or successful downstream delivery. This is code semantics, not observed false reporting or TCAP acceptance of a disagreement.
Altitude — inspected public implementation → Altitude verdict delivery and local-log fallback
schedules reviewed verdict publication and conditional delivery
2024-08-08 – 2024-08-08
Draft review publication is scheduled after 60 seconds; draft cancellation is allowed, published deletion is not available through that endpoint. Configured receiver gets a verdict; without it a local log is written. Either branch can produce internal ACCEPTED, not demonstrated live removal.
Altitude — inspected public implementation → Platform operating Altitude — deployment role
permits software adaptation subject to Apache 2.0 conditions
Inspected commit date, not customer deployment or contract date.
Pinned licence permits reproduction/modification/distribution subject to conditions and warranty limits. Contribution instructions separately require CLA/review; final approvers/permissions were not acquired. Software permission grants no restricted source-database access.
Altitude — inspected public implementation → Terrorist Content Analytics Platform
treats TCAP as trusted in its confidence heuristic
2024-08-08 – 2024-08-08
Pinned code assigns confidence component 3 for TCAP or other qualifying evidence. Separate severity contributes to priority, so TCAP alone does not guarantee top overall rank. Neither confidence nor queue rank is a moderation verdict or calibrated probability.
Platform operating Altitude — deployment role → Altitude — inspected public implementation
configures access, source connections and moderation choices
2024-08-08 – 2024-08-08
Integrator supplies authentication and source credentials. New connections default active with diagnostics inactive after credential pre-check. These static defaults do not identify any customer’s actual consent, roles or source access.
Terrorist Content Analytics Platform → Altitude — inspected public implementation
supplies URL-alert metadata in the inspected adapter
2024-08-08 – 2024-08-08
2024 adapter imports source identifier/report date, group text, flags, URL and availability. This is the older URL-alert interface; it is not evidence of current content-hash deletion handling or ignored corrections.
Tech Against Terrorism → Altitude — inspected public implementation
announced it would lead maintenance and development
2024-07-22 – 2024-07-22
July announcement assigns prospective stewardship to TAT with Jigsaw advisory support. Repository namespace and last observed main commit do not prove present operational vetoes or that no other development exists.
These accounts create a time-ordered delivery trail that fits the disclosed archive/classification/workflow workstreams. That fit is an inference, not a contractual allocation: no acquired budget annex shows which of Altitude, the LLM, the archive or an API was paid from agreement22841. There is no need to invent one fully integrated product to explain the record. A shared archive can supply signals to multiple systems; a workflow tool can mediate provider decisions; government support can fund development while particular data and enforcement decisions remain private. The public product and Canadian lanes must resolve their own parts.
TAT announcement and reviews attribute co-development to Google Jigsaw and continuing advisory support. Existing Google identity reused with Jigsaw scope; no current unilateral repository veto, deployment or Canadian allocation inferred.
July announcement assigns prospective stewardship to TAT with Jigsaw advisory support. Repository namespace and last observed main commit do not prove present operational vetoes or that no other development exists.
Inspected commit date, not customer deployment or contract date.
Pinned licence permits reproduction/modification/distribution subject to conditions and warranty limits. Contribution instructions separately require CLA/review; final approvers/permissions were not acquired. Software permission grants no restricted source-database access.
2024 adapter imports source identifier/report date, group text, flags, URL and availability. This is the older URL-alert interface; it is not evidence of current content-hash deletion handling or ignored corrections.
Pinned code assigns confidence component 3 for TCAP or other qualifying evidence. Separate severity contributes to priority, so TCAP alone does not guarantee top overall rank. Neither confidence nor queue rank is a moderation verdict or calibrated probability.
Integrator supplies authentication and source credentials. New connections default active with diagnostics inactive after credential pre-check. These static defaults do not identify any customer’s actual consent, roles or source access.
Draft review publication is scheduled after 60 seconds; draft cancellation is allowed, published deletion is not available through that endpoint. Configured receiver gets a verdict; without it a local log is written. Either branch can produce internal ACCEPTED, not demonstrated live removal.
Export requires diagnostics active and maps BLOCK to REMOVE. Selection uses the latest review in the interval without the inspected condition requiring published state or successful downstream delivery. This is code semantics, not observed false reporting or TCAP acceptance of a disagreement.
Generic importer can call source-specific redaction on DELETE; the method implementation was not read. Inspected TCAP adapter yields UPDATE_OR_INSERT and its ACT/INA means URL availability, not withdrawn classification. Different interfaces/versions preclude treating this as failure of the current hash-deletion API.