Public evidence catalog

The canonical catalog is generated deterministically from reviewed JSON records under evidence/records/. Category pages and this explanation are views, not duplicate evidence sources.

Current normalized records

Stable record	Status	Scope and limitation
[email protected]	passed	Repository checks for the exact public documentation commit; no customer-environment conclusion.
[email protected]	unavailable	No affirmative portfolio-wide external-assurance record; does not disclose protected assessment state.

Use the machine-readable catalog for filters and the manifest for exact record and catalog digests. Consumers must preserve status, scope, review state, limitations, and supersession rather than showing only passing records.

Historical and unavailable records

Failed, unavailable, withheld, expired, superseded, revoked, and tombstone records remain addressable while retained. A tombstone preserves the stable ID, former category, terminal status, owner, dates, supersession, and a safe reason; it never points to a protected artifact.