Alpha Covenant Holdings · Known Limits · 53 sources · JSON: /api/public-record/known-limits · page: /methodology · reviewer packet: /api/record/reviewer-packet
Access: read: a file we hold and read in full for this receipt, with its fetch date and SHA-256 printed · live: queried live against the official endpoint for this exact receipt · gated: behind credentials this platform does not hold; printed as not read, never as no match · paid: behind a licensed/paid feed this platform does not buy; printed as did not answer, never as no match · not_read: not connected in this deployment; printed as not read, nothing stands in for it
| Source | Access | What it cannot tell you | Constraint |
|---|---|---|---|
| SAM.gov Exclusions (Public Extract) | read | Exact printed name or UEI only, no fuzzy matching; law-enforcement-withheld and classified records are not in the public extract; a name's absence is not proof that no same-named party exists elsewhere. | stated by |
| HHS-OIG LEIE | read | Monthly file; individuals matched by exact name (plus NPI when the record carries one), never by SSN or date of birth; state-only Medicaid exclusions that never reach LEIE are not here. | stated by |
| OFAC Specially Designated Nationals (SDN) | read | The SDN list only; other Consolidated Sanctions List parts are read separately. Exact printed name; transliteration and alias variants are not fuzzy-matched. | stated by |
| State Medicaid exclusion / termination lists | read | Only the states that publish a machine-readable list are read; coverage is partial and per-state, not all fifty states. | stated by |
| Consolidated Screening List · FDA Debarment | read | As published by ITA and FDA; exact printed name. The CSL aggregates several agency lists whose own scopes differ. | stated by |
| UFLPA Entity List (FLETF) | read | Read from the complete list in the appendix to the latest Federal Register notice, because dhs.gov serves the list to browsers only. Exact printed name or alias as the notice prints it. The list names entities; it does not trace goods, and CBP's rebuttable presumption is CBP's act, not this receipt's. | stated by |
| FARA active registrants (DOJ) | read | Registrants with an active registration, exact printed name, from DOJ's eFile API. A registration is a disclosure that the registrant acts for a foreign principal — not a sanction or finding. Foreign principals and individual short-form registrants are not in the API we can read (404) and are named as not read. | stated by |
| DoD Section 1260H list | read | Entities and the statutory basis as the latest Federal Register designation notice prints them, because media.defense.gov serves the PDF to browsers only. Exact printed name or alias in the notice. DoD updates at least annually; the receipt shows the notice date. | stated by |
| OSHA inspections (DOL Enforcement API) | live | Inspections opened in the last five years where the establishment name equals the exact printed name; names containing the typed words are listed as candidates, not counted. An inspection is a visit, not a violation — citations are on OSHA's detail page. Establishment names are typed by the inspecting office, so one employer prints under many spellings. The DOL API rate-limits (HTTP 429); when it does, receipts print did not answer for up to an hour and nothing stands in for it. Cached 24 h per name. The SVEP log is offline and not read. | stated by |
| PHMSA pipeline enforcement cases | read | Every case in PHMSA's raw data file, matched on the printed operator name. A case is a proceeding; the file's own status and latest-order fields say where it stands, and penalties are shown as proposed, assessed and collected separately. Operators are pipeline companies — a supplier to one is not in this file. | stated by |
| NRC significant enforcement actions | read | Escalated actions as the NRC's pages index them, by facility or company heading; the licensee's corporate name is often only in the description, so descriptions that mention the exact name are listed as mentions, not counted. Actions against individuals are a separate collection and are not read. Hashed as parsed because the NRC publishes no file. | stated by |
| UN Security Council Consolidated List | read | The UN's official XML, held and hashed; entities by exact printed name or alias, individuals of the same printed name shown and not counted. The measures that apply are each sanctions committee's. EU and UK consolidated lists are not read (both publish behind registration tokens); OFAC SDN is read separately. | stated by |
| OSHA Severe Violator Enforcement Program log | not_read | OSHA has taken the public SVEP log offline while the program is updated (checked 2026-10-04); nothing stands in for it. OSHA inspection records are read from the DOL API instead. | stated by |
| FERC civil penalty actions / NERC Notices of Penalty | not_read | ferc.gov answers programs with HTTP 403 and eLibrary publishes no bulk penalty file; listed under not read with the official page. A utility's NERC reliability-standard record is between the utility, its Regional Entity and FERC. | stated by |
| CBP Enforce and Protect Act (EAPA) investigations | not_read | cbp.gov answers programs with HTTP 403 and EAPA notices are PDFs for browsers only; listed under not read with the official page. | stated by |
| FCC Covered List (Section 889 / 47 CFR 1.50002) | not_read | fcc.gov answers programs with HTTP 403 and no machine-readable federal file carries the list; it is listed under not read with the official page. The Section 889 use-representation is the offeror's own statement in SAM, not a public-record lookup. | stated by |
| CFPB Consumer Complaint Database | live | Company field equals the exact name; the CFPB spells company names its own way, so candidates containing the words typed are listed, not counted. A complaint is a consumer's account forwarded to the company, neither verified nor adjudicated by the CFPB; counts scale with customer base. | stated by |
| FDA Enforcement Reports (recalls, openFDA) | live | Recalling-firm field equals the exact name across the food, drug and device endpoints. A recall is a classified product action FDA published, many voluntary; no row under this spelling is not no recall under FDA's spelling. | stated by |
| IRS TEOS — Automatic Revocation · Publication 78 | read | Exact legal name or EIN. Publication 78 lists deductibility of contributions, not every tax-exempt entity; absence is not a statement about a party's exemption. | stated by |
| Virginia SCC business entity files | read | Virginia registrations only; a business formed in another state will not appear here. | stated by |
| Rescued facility layers (HIFLD-derived) | read | Pinned, previously public versions held in Data Rescue Project custody; not a currently DHS-endorsed or live feed, and stale by design — the pinned date is printed. | stated by |
| Florida Sunbiz corporate registry | read | Florida registrations only; exact printed name or document number. | stated by |
| CMS Medicaid Provider Spending by NPI | read | A per-NPI total this platform aggregates from CMS's official row-level file for one data year; it is not a CMS-published per-provider figure and is bounded to the years read. | stated by |
| HHS-OIG Corporate Integrity Agreements | read | Exact printed party name from the public browse list; settlement amount, duration and dates are as OIG publishes them; the agreement's specific obligations are those in the signed document. | stated by |
| USAspending recipients & awards | live | Exact recipient name; recipient-name variants and parent/child rollups are not resolved by this platform; figures are as federal agencies reported them. | stated by |
| USAspending subawards (prime-to-sub money flow) | live | Sub-awards by exact sub-awardee name; USAspending's search is a contains-search, so only exact-name rows are counted; amounts and prime-award ids are USAspending's own reported values. | stated by |
| Federal Audit Clearinghouse (single audits) | live | Exact name; the API can time out, in which case the receipt prints did not answer — never no match. | stated by |
| HHS OCR breach portal | live | Only breaches affecting 500 or more individuals are posted; smaller breaches are not in this portal. | stated by |
| EPA ECHO facility search | live | Facility name / registry match; environmental-program coverage varies by facility and medium, and unpermitted activity is not represented. | stated by |
| EPA ECHO — Clean Water Act (NPDES) water permits | live | NPDES water-discharge permits by exact facility name; facilities permitted only under a state program ECHO does not surface will not appear, and holding a permit is not a violation. | stated by |
| SEC EDGAR registrants and filings | live | Only SEC registrants and filers; private companies that never filed are absent. Matched by name or CIK. This source is EDGAR, not SEC litigation releases. | stated by |
| CMS NPPES NPI Registry | live | Exact NPI only; a directory of providers, not a screen for exclusion, sanction or discipline. | stated by |
| CMS Medicare public-use files by NPI | live | Public-use FFS, Part D and enrollment files by exact NPI; totals are the files' own published values. The CMS Preclusion List is not in these files — see its own row. | stated by |
| CMS Preclusion List | gated | Restricted to Medicare Advantage / Part D plans holding a valid Health Plan ID; this platform holds none, so it is printed as not read on every provider receipt — never as no match. | stated by |
| CMS Open Payments | live | Exact NPI; payments as industry reported them, including any reported disputes; it does not establish that a relationship was improper. | stated by |
| CMS Care Compare facilities by CCN | live | Facilities by exact CCN or printed name; star ratings are CMS's own published values, not this platform's rating. | stated by |
| Senate LDA lobbying registrations | live | Registrations and reports as filed under the Lobbying Disclosure Act; exact name; unregistered activity is not represented. | stated by |
| FEC committees | live | Registered political committees; exact name. The shared demo API key is rate-limited, which can show as reachable-but-quota-used. | stated by |
| SAM.gov entity registration / FAPIIS (UEI) | live | Exact UEI; this reads the PUBLIC FAPIIS / FAR 52.209-7 integrity records (proceedings, disclosure questions). A zero count means none are posted, not that none occurred. The API enforces a daily quota; when used up the receipt prints did not answer, never no match. | stated by |
| CPARS contractor performance evaluations | gated | CPARS past-performance RATINGS (the government's own quality/timeliness/cost/management scores) are not public — access is restricted to authorized federal agency users. They cannot be shown on a receipt; only the public FAPIIS integrity records above are read. | stated by |
| State professional licenses & disciplinary actions (WA, CO, NY, TX) | live | Four state boards read live (WA credential + action, CO license status, NY medical-conduct actions, TX license + disciplinary status), matched by exact first and last name; state boards carry no NPI, so there is no NPI join, and a license absent here may exist in a state not read. | stated by |
| IRS Form 990 nonprofit financial facts | live | The organization's own IRS Form 990 figures by tax year (via ProPublica's republication of IRS 990 data), read by EIN or exact name. Self-reported and AS FILED — not verified or audited by this platform; the IRS has documented data-quality issues in e-filed returns. Officer/executive compensation is shown as filed and never characterized. No ratio or score is computed. | stated by |
| FAA Aircraft Registry (releasable database) | read | Aircraft registered to an exact printed registrant name in the FAA's official Releasable Aircraft MASTER file. The FAA prints names in its own order (companies by registered name; individuals as LAST FIRST MIDDLE), so it is strongest for corporate/LLC owners; per 49 U.S.C. 44114(b) some private owners' details are withheld, so absence is not proof of none. Location and registrant type are shown to help confirm identity. | stated by |
| PHMSA pipeline incident data | not_read | PHMSA publishes pipeline incident data as non-tabular downloads with no name-queryable official API, and the download page blocks automated retrieval; with no paid resolver used, it is printed as not read, never as no incidents. | stated by |
| County/local jail medical & service contracts | not_read | County and local jail contracts (correctional healthcare, commissary, EHR, etc.) are scattered across individual county procurement portals with no unified official API; this platform reads no county-PDF scraper and no paid aggregator. The vendor itself (e.g. a correctional-healthcare company) is fully screened as an entity here, and its federal and state dollars appear via USAspending, subawards, and state checkbooks — but a specific county jail contract that is not published as open data is printed as not read. | stated by |
| People-level jail / inmate records | not_read | Individual-level jail and inmate data is access-restricted (BJS individual data is largely restricted; the BOP Inmate Locator has no official API). By doctrine this platform does not build people-level correctional records — only entity-level vendor and facility facts, never a person's incarceration record. | stated by |
| DEA registrant actions — Decision and Order notices (Federal Register) | live | Final DEA orders as published in the Federal Register (the DEA Diversion administrative-actions page points to this index), by exact printed party name in the notice title, also compared with DEA's credential suffix (', M.D.') removed. The order's outcome is quoted verbatim from the notice — never labelled by this platform. Show-cause orders, hearings and state-board actions are not here; names are printed as DEA printed them, so a same-named party is an ambiguity candidate, not a match. | stated by |
| DEA Controlled Substances Act registrant database | gated | The CSA registrant file (registrant name, address, DEA number, business activity, schedules, status) stopped being a public NTIS product in November 2020; DEA now releases it only to approved applicants under an annual Data Use Request, and a 'limited' set without DEA numbers to need-to-know applicants. This platform holds no such approval, so whether a party currently holds a DEA registration is printed as not read — never as no registration. | stated by |
| SAMHSA / HRSA population and program statistics (NSDUH, HAB, ADAP reports) | not_read | NSDUH prevalence estimates, HRSA HIV/AIDS Bureau performance measures and ADAP program reports are aggregate statistics by state, region or program — they carry no entity key (no name, NPI, UEI or EIN) and cannot be joined to any party on a receipt. They are not read, and their absence says nothing about a party. SAMHSA's Treatment Services Locator is a search interface over the same facility directory, not a separate record source. | stated by |
| People-level HIV/AIDS program client records (Ryan White, ADAP) | not_read | Client-level Ryan White and ADAP data reported to HRSA is privacy-protected and released only in aggregate. By doctrine this platform does not build people-level health, treatment or program-participation records about anyone — only entity-level provider and funding facts (Ryan White award dollars to a provider appear via USAspending). Nothing stands in for this. | stated by |
| State business registries (live) | live | Five states read live (CT, CO, NY, OR, PA), exact name; other states are not covered by this live path. | stated by |
| State UCC liens & state vendor/checkbook payments | live | UCC by exact debtor name in Connecticut only (Colorado publishes no party names, Oregon only secured-party names); payments by exact vendor name in Vermont, Delaware and Connecticut only. | stated by |
| OpenCorporates (Treasury Do Not Pay-designated) | paid | A commercial license and API token are required; none is configured here, so this source prints did not answer — not a statement that no registry record exists. | stated by |
1, 5, 10, 20 and 40 simultaneous receipts all completed with no error; 80 simultaneous receipts crashed the worker (fixed: Florida file reads are now serialised) and, after the fix, 75 of 80 completed with 5 lost to the 60-second edge timeout.
40 receipts building at once. Beyond that a request waits up to 10 seconds for a slot, then receives HTTP 429 with Retry-After — the receipt is never thinned, cached from a shortcut, or sped up by skipping a source.
Sources that throttled or slowed under this load and therefore printed 'did not answer' on some receipts: EPA ECHO (5 of 10 at 10 concurrent), Federal Audit Clearinghouse (3 of 10), Senate LDA (up to 6 of 20), USAspending (3 of 80). Each such receipt says so on its face. Not measured: sustained hourly volume against upstream daily quotas (SAM.gov key), and production hardware. (2026-09-30, preview (slower than production, same code)).
Not a statement about any party. A limit describes what a source cannot tell you, never what a name did or did not do.