Evidence and document governance

Policy. A document names its owner, authorized approver, classification, version, lifecycle state, review date, and cadence. Metadata alone never proves approval; approval binds an authorized decision to the exact document set and digest.

Documented process. Public source, generated validation records, protected approval, immutable release identity, and production acceptance remain separate evidence layers. See the documentation pipeline.

Implemented public state. The Evidence Center publishes allowlisted, deterministic records with retention, supersession, tombstone, and withheld states. Missing, protected, stale, or unavailable evidence remains explicit and never defaults to success. Issue #137 records the bounded implementation and its exact review evidence.