{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-16T02:40:06.177Z",
  "record_id": "VXI-EXT-PROCUREMENT-GCP-SINK-EXCLUSIONS-01-v1",
  "record_kind": "external_reference",
  "title": "Cloud Logging: A sink exclusion is a routing decision",
  "system": "Google Cloud Logging",
  "evidence_family": "vendor_evidence_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does excluding a log from one Cloud Logging sink prove Google never received or stored it elsewhere?",
  "near_questions": [
    "When are Cloud Logging exclusion filters applied?",
    "Does an exclusion reduce entries.write calls?",
    "Can another sink route the same log?",
    "What does an intercepting aggregated sink change?",
    "Which required logs have special routing?",
    "Does a sink exclusion delete previously stored entries?",
    "Which destination controls retention?",
    "What topology should procurement inspect?",
    "Can a filtered search prove no collection occurred?",
    "Which entry classes are covered by the filter?",
    "When should a non-retention claim be qualified?",
    "Can I save a log-routing boundary review?"
  ],
  "supported_claims": [
    {
      "claim": "Exclusion filters are applied after the Logging API receives entries and determine routing for the relevant sink. Other sinks and aggregated-routing rules can still matter. Review the complete routing topology before treating an exclusion as non-collection, global deletion or absence from every destination.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "Exclusion filters are applied after the Logging API receives entries and determine routing for the relevant sink. Other sinks and aggregated-routing rules can still matter. Review the complete routing topology before treating an exclusion as non-collection, global deletion or absence from every destination.",
  "related_record_ids": [
    "VXI-EXT-PROCUREMENT-ENTRA-RETENTION-01-v1",
    "VXI-EXT-PROCUREMENT-NOTION-AGENT-AUDIT-01-v1",
    "VXI-EXT-PROCUREMENT-GITLAB-AUDIT-DEDUPE-01-v1",
    "VXI-EXT-PROCUREMENT-CLOUDTRAIL-VALIDATION-01-v1",
    "VXI-EXT-PROCUREMENT-S3-LOG-COMPLETENESS-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Cloud Logging routing and exclusions",
    "source_url": "https://docs.cloud.google.com/logging/docs/routing/overview",
    "checked_on": "2026-10-16",
    "candidate_record_id": "VXI-EXT-PROCUREMENT-GCP-SINK-EXCLUSIONS-01-v1",
    "candidate_record_sha256": "c9f806bac0d87d9ea07b3c4492d5ac561a924625c076f9e54c203b496183cb75",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Exclusion filters are applied after the Logging API receives entries and determine routing for the relevant sink. Other sinks and aggregated-routing rules can still matter. Review the complete routing topology before treating an exclusion as non-collection, global deletion or absence from every destination.",
    "required_buyer_context": "Google Cloud Logging: Sink filters, aggregated routing, destinations and retention; buyer configuration and operational evidence are required.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "decision_profile": {
    "schema": "varexis-vendor-evidence-review/1",
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-16",
    "claim_to_check": "One sink exclusion proves global non-collection and non-retention.",
    "documented_statement": {
      "status": "documented",
      "statement": "Exclusion filters are applied after the Logging API receives entries and determine routing for the relevant sink. Other sinks and aggregated-routing rules can still matter. Review the complete routing topology before treating an exclusion as non-collection, global deletion or absence from every destination.",
      "source_ids": [
        "gcp-log-routing"
      ]
    },
    "buyer_evidence_required": [
      "Inclusion/exclusion filters on the relevant sink.",
      "Other project and aggregated sinks and their destinations.",
      "Evidence of destination retention for the relevant entry class."
    ],
    "review_condition": {
      "status": "varexis_review_policy",
      "statement": "Do not infer global erasure or non-collection from one routing filter."
    },
    "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature.",
    "evidence_sources": [
      {
        "source_id": "gcp-log-routing",
        "url": "https://docs.cloud.google.com/logging/docs/routing/overview",
        "final_url": "https://docs.cloud.google.com/logging/docs/routing/overview",
        "title": "Cloud Logging routing and exclusions",
        "checked_on": "2026-10-16",
        "sha256": "7889ce95449434617b062743802103edc746949c47125cce437b0b0d0fc61fd4",
        "bytes": 205338
      }
    ],
    "observed_deployment": false,
    "commercial_reliance_boundary": "Procurement evidence support only; no supplier clearance, legal conclusion, configuration audit or verification of the buyer's claim is supplied.",
    "paid_value": {
      "decision_context": "Preserve the routing evidence needed to distinguish filtering from data erasure.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "A saved purchase does not recheck the source or buyer configuration.",
      "specific_watch": "Sink filters, aggregated routing, destinations and retention"
    }
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#gcp-log-sink-exclusion-scope",
  "machine_readable_record": "/varexis-index/records/gcp-log-sink-exclusion-scope.json"
}