Technical buyer guide · Two independent controls

Temporal leakage and target leakage are different control problems.

One asks whether information was available when a decision was made. The other asks whether outcome knowledge influenced which candidate features were allowed to enter. Treating them as one vague “leakage check” makes both harder to inspect.

01 / Availability-time boundary

Could the decision know this context row yet?

A record can be dated before a decision and still have become available afterward. Event time alone does not establish usable knowledge.

  • Compare event time with availability time.
  • Enforce backward as-of direction and period completion.
  • Check grids, revisions, duplicate keys, and freshness.
Temporal Boundary Auditor

02 / Pre-target selection boundary

Was the candidate list frozen before outcomes could influence it?

A feature set can absorb label knowledge through manual curation, permissive naming, or an undocumented schema pass before model fitting begins.

  • Declare every column's type and role without values.
  • Apply one explicit include, exclude, and count policy.
  • Retain both selected fields and exclusion reasons.
Target-Blind Feature Freezer

Control comparison

Different question, different input, different retained proof.

Control dimensionTemporal Boundary AuditorTarget-Blind Feature Freezer
DecisionWas context available, complete, ordered, and fresh enough at each decision time?Which declared fields satisfied one policy before target values were read?
ReadsLocal CSV or JSON Lines decision and context records under a strict temporal contract.A strict values-free JSON column schema and freeze contract; no dataset rows or target values.
RetainsAggregate JSON, streaming findings JSON Lines, Markdown, and exact input byte hashes.Ordered manifest, selected-feature CSV, exclusion ledger, Markdown, and checksums.
Primary failureUnavailable, incomplete, off-grid, ambiguous, duplicate, or stale temporal context.Protected roles, forbidden names, disallowed types, pattern exclusions, or count-policy failure.
Does not proveSource truth, causal validity, complete lineage, absence of every leakage path, or model fitness.Correct roles, target-blind upstream computation, harmless proxies, feature usefulness, or model fitness.
Price and delivery$499 USD once · one legal entity · private local delivery.$249 USD once · one legal entity · private local delivery.

Synthetic public evidence

Inspect the boundary record before evaluating the implementation.

Feature sample / FROZENOne selected, five excluded

The published exclusion-focused manifest records a six-column declaration with one selected feature and five exclusions. It explicitly records dataset_values_read: false and target_values_read: false.

Source columns
6
Selected features
1
Excluded columns
5
Runtime network
No
Inspect exact manifest JSON Download deterministic evaluation pack

These are wholly synthetic evaluation records. They demonstrate public contracts and expected outputs; neither archive contains executable audit or freeze logic, a commercial license, customer material, private schemas, or private implementation.

Optional sequence

Freeze eligibility first. Audit availability where time enters.

A team may freeze a candidate-feature declaration before target values are read, then separately audit the availability boundary of temporal context used to compute or join those features.

The records stay distinct. A frozen manifest does not establish that upstream values were computed without future knowledge. A temporal PASS does not establish that the candidate list was selected without label knowledge. Each contract must be reviewed on its own terms.

  1. 01
    Declare roles without valuesTarget, identity, time, candidate, excluded
  2. 02
    Freeze candidate eligibilityOrdered manifest plus exclusion ledger
  3. 03
    Declare temporal clocksDecision, event, availability, and period
  4. 04
    Audit the as-of boundaryAggregate and row-addressable findings

Combined boundary

Two controls still do not prove “no leakage.”

Together or separately, these tools do not prove correct source data, honest role declarations, target-blind upstream computation, complete lineage, absence of hidden proxies, absence of every future-information path, causal validity, statistical validity, compliance, safety, or fitness. They make two narrower decisions explicit and leave the remaining assurance work visible.

Choose the route

Start with the uncertainty you actually need resolved.

If timing is the risk

Evaluate Temporal Boundary Auditor.

Use the guide, synthetic reports, offline pack, and closed-choice fit check before sending a purchase request.

$499 USD · one time
Check v1 fit Evaluator guide

If candidate selection is the risk

Evaluate Target-Blind Feature Freezer.

Use the guide, synthetic manifests, offline pack, and closed-choice fit check before sending a purchase request.

$249 USD · one time
Check v1 fit Evaluator guide

Buyer questions

Keep the claim as narrow as the control.

Are temporal leakage and target leakage the same problem?

No. Temporal leakage asks whether context was actually available at a decision time. Target leakage asks whether outcome knowledge influenced which candidate features were allowed to enter. Each requires a separate declared boundary.

Does passing either control prove that a model has no leakage?

No. Each tool evaluates a narrower declared contract. Neither proves source truth, correct operator declarations, complete lineage, absence of every leakage channel, model validity, causality, safety, or fitness.

Do the two products have to be used together?

No. They are separately licensed local tools with independent contracts and outputs. A team may sequence them deliberately, but neither automatically consumes nor validates the other product's records.

Do I need to upload a dataset to evaluate the products?

No. The public evaluation materials are synthetic and downloadable. The licensed tools run locally without runtime network requests; the Feature Freezer accepts values-free schema metadata, while the Temporal Auditor evaluates local CSV or JSON Lines records.

Still deciding?

Route by decision, not by a broad leakage label.