Image filenames can publish a name the page never shows
What the source requires
Names are the first identifier Safe Harbor requires to be removed. An image URL is published HTML: a filename pairing a surname with a treatment discloses that name to anyone reading the source, whatever the picture itself shows.
Why this is hard to satisfy
Filenames arrive from a camera, a device manufacturer or a rep and are uploaded untouched. Nobody reviews them, they are invisible in the page as rendered, and a CMS will happily serve them forever. Found on a real engagement: nine before-and-after images carried surnames in their filenames.
What we do about it
Read image URLs on every page scanned and report filenames that pair a person-like name with treatment or before-and-after markers. Renaming the file is the whole remedy, and it costs nothing.
In build · phase one
What this tier means
Same input, same verdict, every time — no model in the loop. This is the only tier where the word “verified” is literally true.