{
  "schema_version": "1.0",
  "artifact_scope": "public_trust_report",
  "generated_from": "docs/generated/control_matrix.json",
  "last_validated": "2026-05-23T16:36:32Z",
  "disclosure": "This public trust report intentionally summarizes control-matrix proof counts without exposing implementation paths, test names, evidence paths, git branch names, or workstation details. The full signed reviewer bundle is available to qualified reviewers on request.",
  "totals": {
    "total_controls": 177,
    "substantiation": {
      "code_test": {
        "count": 148,
        "percent": 83.6
      },
      "dated_live_evidence": {
        "count": 16,
        "percent": 9.0
      },
      "external_fact": {
        "count": 13,
        "percent": 7.3
      },
      "unspecified_pending": {
        "count": 0,
        "percent": 0.0
      }
    },
    "last_validated": "2026-05-23T16:36:32Z"
  },
  "control_types": {
    "audit_finding": 21,
    "billing_integrity": 7,
    "claim_boundary": 49,
    "operational_principle": 5,
    "pdpl_article": 25,
    "routing_control": 9,
    "runtime_control": 61
  },
  "pdpl": {
    "control_entries": 25,
    "distinct_articles_referenced": 20,
    "controls_with_verbatim_descriptions": 23,
    "controls_with_tests": 22,
    "controls_with_external_dependency": 2,
    "controls_with_coverage_gap": 2
  },
  "does_not_prove": [
    {
      "boundary": "Independent external audit or certification",
      "source": "docs/claims-boundary.md — What none of the above prove"
    },
    {
      "boundary": "Hardware-backed WORM immutability",
      "source": "docs/claims-boundary.md — What none of the above prove"
    },
    {
      "boundary": "Production-wide coverage for every tenant and every historical record",
      "source": "docs/claims-boundary.md — What none of the above prove"
    },
    {
      "boundary": "HSM-backed custody for every signing/integrity secret",
      "source": "docs/claims-boundary.md — What none of the above prove"
    },
    {
      "boundary": "Regulator approval",
      "source": "docs/claims-boundary.md — green-lane legal-position caveat"
    }
  ],
  "review_paths": {
    "human_readable": "/trust-report",
    "machine_readable": "/resources/trust-report.json",
    "public_matrix_summary": "/resources/control_matrix.json",
    "request_full_reviewer_bundle": "/contact"
  }
}
