OSINT
Methods for systematically finding, verifying and documenting information from open and lawfully accessible sources.
Other forms
OSINT
A shared platform language
OSINT Hub glossary
Controlled definitions in Kazakh, Russian and English. On other pages, a term's first occurrence has a quiet dotted underline.
Hover or move keyboard focus to an underlined term to reveal its short definition.
60 terms
closed pilot
A controlled test phase with limited participants, an approved purpose and no automatic authorization for production.
Other forms
closed pilotclosed-pilot
Evidence Spine
The connected chain from source to conclusion that preserves versions, exact anchors, limitations, transformations and human decisions.
Other forms
Evidence Spine
Source Passport
A versioned source record describing ownership, legal basis, coverage, freshness, risk and collection-admission state.
Other forms
Source Passportsource passports
search attempt
One recorded search run with its query, checked sources, time bounds, results, failures and exclusions.
Other forms
search attemptsearch attempts
Coverage Envelope
A required record of checked sources and time bounds, search completeness and the limits beyond which a conclusion must not be applied.
Other forms
Coverage Envelope
evidence
Research material whose provenance, time, integrity state and link to an exact source version are preserved.
Other forms
evidence
evidence anchor
An exact pointer to a fragment of a document, page, image or media item that supports or refutes a conclusion.
Other forms
evidence anchorevidence anchors
transform provenance
The recorded tool, version, parameters, inputs and limitations behind OCR, parsing, translation or a model-produced result.
Other forms
transform provenancetransformation provenance
independence group
A record grouping materials with a common origin, owner or syndication so they are not counted as independent corroboration.
Other forms
independence groupindependence groups
claim
An atomic, verifiable statement linked to evidence, a coverage envelope and separate human assessment dimensions.
Other forms
claimclaims
human review
The stage where an authorized professional examines evidence, method, limitations and harm risk and records a decision.
Other forms
human review
redaction
Controlled removal or masking of personal, confidential or potentially harmful material before disclosure.
Other forms
redactionredactions
disclosure decision
A recorded decision defining which material may be disclosed, to which audience, after what redaction and under which policy version.
Other forms
disclosure decisiondisclosure decisions
audit chain
A log where every event is linked to the previous event hash, making later undisclosed alteration detectable.
Other forms
audit chainhash-chained audit
tenant
A security boundary isolating one organization's users, cases, keys and policy from every other organization.
Other forms
tenanttenant boundary
Private Case Bundle
An encrypted portable container for case records, its manifest and audit evidence with mandatory integrity verification.
Other forms
Private Case Bundleencrypted case bundle
capture preflight
Policy validation of a URL, scheme, port, redirects and DNS observations before any network request is made.
Other forms
capture preflightcapture-preflight
SSRF
A vulnerability class where an attacker causes a server to request an internal, local or otherwise forbidden address.
Other forms
SSRF
DNS rebinding
An attack technique where one domain name changes between validation and connection to another, often internal, IP address.
Other forms
DNS rebinding
kill switch
A control that immediately disables a connector or risky capability and prevents unauthorized reactivation.
Other forms
kill switch
risk tier
A category determining the required authorization, isolation, review and human oversight for a source or operation.
Other forms
risk tierrisk tiers
Source Atlas
A research catalog of potential Kazakhstan sources with their coverage, owner, risk and mandatory admission gates.
Other forms
Source Atlas
SBOM
A machine-readable inventory of software components, versions and provenance included in a specific product build.
Other forms
SBOM
OpenAPI
A standard machine-readable contract describing HTTP API routes, parameters, responses and data schemas.
Other forms
OpenAPI
legal hold
A formal preservation state that temporarily removes material from normal deletion schedules because of an investigation, litigation or regulatory duty.
Other forms
legal hold
WebAuthn
A public-key authentication standard supporting phishing-resistant hardware security keys and passkeys.
Other forms
WebAuthn
DPIA
A prior assessment of risks that personal-data processing creates for people and the measures used to reduce those risks.
Other forms
DPIA
abstention
A decision not to make a stronger conclusion when evidence is insufficient or conflicting, with the gap stated explicitly.
Other forms
abstentionwithheld conclusion
correction log
An append-only record of a material change, its date, reason and new version.
Other forms
correction logcorrections ledger
source version
A source state fixed at a point in time with a digest, locator and change description.
Other forms
source versionversioned source
primary source
A source directly connected to an event or decision that provides an original record or an owner's official version.
Other forms
primary sourcefirst-party source
secondary source
Material that reports, analyses or cites a primary source without replacing it.
Other forms
secondary sourcereported source
corroboration
Support for the same claim that does not derive from the same origin and provides a separate basis.
Other forms
corroborationindependent confirmation
negative result
A record that support was not found within a defined scope and period, or that a hypothesis failed, with its limits.
Other forms
negative resultnull finding
method card
A versioned record of a method's purpose, inputs, steps, version, limits and failure mode.
Other forms
method cardmethod record
benchmark
A test set with expected answers that measures a reference implementation, not real-world quality.
Other forms
benchmarkcontrol set
corpus
A research data collection with provenance, time window, rights and exclusion rules.
Other forms
corpusresearch corpus
reproducibility
The ability for another researcher to check a result using the same safe inputs and method version.
Other forms
reproducibilityreproducible research
synthetic fixture
A deterministic record created for repeatable testing that represents no real person or event.
Other forms
synthetic fixturedeterministic fixture
metadata-only
A safe boundary showing an owner, URL, version, coverage or status without exposing the content itself.
Other forms
metadata-onlymetadata only
owner gate
A decision boundary that keeps a capability off until an owner verifies rights, risk, capacity and release evidence.
Other forms
owner gateowner approval
data minimisation
The principle of collecting, copying, retaining and exporting only data necessary for the stated purpose.
Other forms
data minimisationdata minimization
retention
The approved time and conditions before material is deleted, archived or placed on legal hold.
Other forms
retentionretention period
purpose limitation
The requirement not to silently reuse data for a purpose different from the specific purpose stated in advance.
Other forms
purpose limitationbounded purpose
safeguarding
The duty to design protection from harm, safe contact and escalation for vulnerable participants before work begins.
Other forms
safeguardingparticipant protection
threat model
A structured description of assets, adversaries, attack paths, impact and controls.
Other forms
threat modelthreat modelling
consent
A person's voluntary agreement after understanding the purpose, risks and how to withdraw it.
Other forms
consentinformed consent
legal basis
A documented legal reason that makes collection and processing lawful for a specific purpose.
Other forms
legal basislawful basis
locale
The language context in which a page's language, formats and editorial version are managed together.
Other forms
localelanguage locale
language quality review
Human review of translation meaning, terminology, tone and interface length.
Other forms
language quality reviewLQA
transliteration
A rule for rendering a name in another script; it aids discovery but does not prove identity.
Other forms
transliterationname transliteration
KATO
The official versioned classifier of Kazakhstan's administrative-territorial objects.
Other forms
KATOclassifier of administrative territorial objects
BIN
A 12-digit organisation identifier; its format alone does not prove ownership or status.
Other forms
BINbusiness identification number
IIN
A 12-digit individual identifier kept deny-by-default in OSINT Hub and not processed without a specific legal basis.
Other forms
IINindividual identification number
ISIN
An international code for a financial instrument; syntax does not confirm current listing status.
Other forms
ISINinternational securities identification number
KZT
The ISO 4217 code for the Kazakhstani tenge; an amount is read with its date and conversion method.
Other forms
KZTKazakhstani tenge
snapshot
An immutable control copy of an open dataset or page at a defined point in time.
Other forms
snapshotpoint-in-time copy
diff
A deterministic comparison of two versions that shows an observed difference, not its cause.
Other forms
diffchange comparison
geolocation
An estimate of a place associated with media or data, with precision, risk and source boundaries stated separately.
Other forms
geolocationlocation inference