Evidence index · 366 records · 16 registers
Ask the record a question.
Every gate, requirement, finding, risk, control, AI role and market reference on this site is one ranked index. Nothing here is retyped — each result links to the page that owns it.
/
Whole index · start typing to rank
- B-1MFA enforced for all internal staffScreenshot of enforced policy + one login refused without a second factor Owner UNASSIGNED.REDBlocking gate
- B-2Backup and restore drill completedRestore into a separate environment + audit chain verifies clean against the restored copy + measured RPO/RTO Owner UNASSIGNED.REDBlocking gate
- B-3Licensed AV engine behind the quarantine gateA known-malicious test file (EICAR) quarantined and blocked from certification Owner UNASSIGNED.REDBlocking gate
- B-4INSERT-only grants on audit tablesSHOW GRANTS output + a direct UPDATE attempt refused by the database Owner UNASSIGNED.REDBlocking gate
- B-5Company controls all assetsHosting, repo, DB, domains, secrets, billing under company account, ≥2 admins Owner UNASSIGNED.REDBlocking gate
- B-6Off-platform backup existsDatabase + files export held outside the host platform, dated Owner UNASSIGNED.REDBlocking gate
- B-7Tenant isolation with live accountsTwo live authenticated non-admin accounts; cross-tenant access attempted and refused on the deployed site Owner UNASSIGNED.CONDITIONALBlocking gate
- B-8Named owner receiving scheduler alertsMonitor wired to a paging destination + one test alert acknowledged by a person Owner UNASSIGNED.REDBlocking gate
- B-9Baseline methodology agreedOperations sign-off on the baseline methodology proposal Owner UNASSIGNED.REDBlocking gate
- B-10External adversarial reviewWritten findings from a reviewer who did not build the platform Owner UNASSIGNED.REDBlocking gate
- G-01Controlled state integritynon-waivable. Single write path, 42 guards, optimistic concurrency and hash-chained audit pass 142 automated tests; never exercised against concurrent real usersCONDITIONALGate matrix
- G-02Scheduler durabilitynon-waivable. Persisted heartbeat, four states, external monitor and post-deploy probe are live and caught a real stall in production; the deploy-stall defect itself remains unresolvedCONDITIONALGate matrix
- G-03Stop-work propagationnon-waivable. Cancellation is a declared transition requiring a named human approver; cure, bankruptcy, recall and legal hold are not yet distinct gated eventsCONDITIONALGate matrix
- G-04External isolationnon-waivable. No two real external accounts exist to attack. Cross-tenant isolation is unproven, and unproven is REDREDGate matrix
- G-05Authentication and privilegeP0. MFA is not configured; step-up authentication for critical actions does not existREDGate matrix
- G-06Document safety and integrityP0. Quarantine gate and hashing exist, but no malware engine is wired in; the previous hardcoded CLEAN status was a defect found and fixed this cycleREDGate matrix
- G-07Audit immutabilityP0. Application layer verified clean by automated scan, 5,000+ entry chain verified unbroken; database-level INSERT-only grants not appliedCONDITIONALGate matrix
- G-08Backup and restoreP0. Procedure written; no restore has been performed and no RTO/RPO has been measuredREDGate matrix
- G-09AI authoritynon-waivable. L0–L4 ladder with L4 prohibited, confidence-never-expands-authority enforced by invariant, kill switch admin-only; no external adversarial review performedCONDITIONALGate matrix
- G-10Security readinessP0. No vulnerability scan or penetration test has been run against this buildREDGate matrix
- G-11Trial observabilityP0. Scheduler health, incident module and audit integrity are observable; no alert routing to a named on-call human existsCONDITIONALGate matrix
- G-12Baseline and cohort integritywaivable. Four-way record classification and versioned metric envelope enforced in code; pre-Trial baseline not agreed with OperationsCONDITIONALGate matrix
- G-13Operations readinessP0. No named users trained; no rehearsal of pause/resume with real staffREDGate matrix
- G-14Ownership and recovery accessP0. Single-operator dependency; no documented company-level recovery of code, DNS, secrets and observabilityREDGate matrix
- G-15Scope boundaryP0. No money movement exists in code; finance is validation and routing only, and the AI decision recorder refuses any record claiming a protected-state changeGREENGate matrix
- V-1Lifecycle kernel is the single write path28 states, 38 transitions, 42 guards; illegal transitions refused with a named rulePROVENVerified control
- V-2Audit chain append-only and tamper-evident9,204 entries, linkage intact, atomic chain-head allocationPROVENVerified control
- V-3AI cannot write stateAuthority middleware; 15 tests including L4-prohibited and confidence-cannot-expand-authorityPROVENVerified control
- V-4AI decision record on every AI executionWritten from the same function as the action log; 41 recordsPROVENVerified control
- V-5Compliance hard gates with immutable snapshotsEligibility snapshots canonically hashed; 0 tamperedPROVENVerified control
- V-6Stop-work gates enforced in the write path7 named conditions; 11 tests; retention never blocked under legal holdPROVENVerified control
- V-7Durable scheduling monitored externally119 unattended production sweeps; 503 on failure; post-deploy probePROVENVerified control
- V-8Deadline provenanceRule version, explicit UTC, pause history stamped at creationPROVENVerified control
- V-9Escalation requires verified deliveryA failed notification does not satisfy escalation; 6 testsPROVENVerified control
- V-10Measurement integrityEvery KPI carries numerator, denominator, n, cohort and a server-derived claim classPROVENVerified control
- V-11Synthetic vs real separation130 synthetic / 54 trial / 0 production, stated on screenPROVENVerified control
- V-12RBAC and account deactivation13 tests; revoked account refused on next request; history retainedPROVENVerified control
- V-13Analytics suppressed on sensitive routes8 route families; persisted global switch; 5 testsPROVENVerified control
- V-14Non-admin end-to-end workflow7 steps, LENDER / OPERATIONS / VENDOR only, no adminPROVENVerified control
- V-15Structured error contractFailed rule + current state + required action on every refusalPROVENVerified control
- ARC-01One canonical server write path for protected assignment state.Architecture. Provide server call graph; eliminate side paths. Proof: Source, transaction boundary, bypass tests. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- ARC-02Deterministic controls govern safety/compliance decisions outside AI.Architecture. Map every protected decision to deterministic enforcement. Proof: Server guard code + negative tests. Priority P0. Blocker YES.PARTIALAudit requirement
- ARC-03AI cannot expand its authority or change protected state.Architecture. Prove service identities, tool allowlists and DB permissions. Proof: Adversarial tool tests + IAM evidence. Priority P0. Blocker YES.PARTIALAudit requirement
- ARC-04Material state/event/audit/deadline effects commit atomically.Architecture. Review transaction and failure injection. Proof: DB transaction source + rollback tests. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- ARC-05Refused actions create durable structured evidence.Architecture. Verify refusal writer and coverage. Proof: Refusal schema, logs, tests and sample export. Priority P0. Blocker YES.PARTIALAudit requirement
- LCY-01Declared lifecycle is authoritative and complete.Lifecycle. Generate server topology and compare to client. Proof: Reachability analysis + route/kernel diff. Priority P0. Blocker YES.PARTIALAudit requirement
- LCY-02All 28 declared states have entry/exit semantics and owner.Lifecycle. Publish state catalog with invariants/deadlines. Proof: State catalog + tests per state. Priority P0. Blocker YES.PARTIALAudit requirement
- LCY-03Every transition defines actor, guards, evidence, deadlines, notices and audit event.Lifecycle. Complete transition contract; test effects. Proof: Machine-readable transition matrix + tests. Priority P0. Blocker YES.PARTIALAudit requirement
- LCY-04Stale concurrent writes are rejected, not overwritten.Lifecycle. Prove expected-version handling server-side. Proof: Concurrent race test and DB semantics. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- LCY-05Reopen is authorized, reasoned and routed to bounded target.Lifecycle. Test permission/reason/target/side effects. Proof: Reopen negative tests + audit evidence. Priority P1. Blocker YES.PARTIALAudit requirement
- LCY-06No unreachable states, duplicated commands or unsafe shortcut edges.Lifecycle. Static topology and mutation-route audit. Proof: Graph analysis and protected-write inventory. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- SAF-01Cure/cancellation/recall/bankruptcy/legal hold immediately raises stop-work.Wrongful recovery. Prove source-to-field propagation and acknowledgement. Proof: End-to-end tests across every active state. Priority P0. Blocker YES.PARTIALAudit requirement
- SAF-02Identity/VIN conflict blocks verification and continued action.Wrongful recovery. Test VIN/plate/duplicate/conflicting evidence cases. Proof: Negative tests + escalation/audit records. Priority P0. Blocker YES.PARTIALAudit requirement
- SAF-03Cancellation semantics are safe before dispatch, during active work and after custody.Wrongful recovery. Define terminal vs stop-work vs custody outcome. Proof: State-by-state cancellation test matrix. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- SAF-04Duplicate lender submissions and duplicate VINs cannot create parallel unsafe work.Wrongful recovery. Enforce idempotency and duplicate-review hold. Proof: Concurrent duplicate submission tests. Priority P0. Blocker YES.PARTIALAudit requirement
- SAF-05Changed lender instructions are versioned, authorized and propagated.Wrongful recovery. Create authoritative instruction event and acknowledgement. Proof: Change/acknowledgement/stop tests. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- SAF-06Vendor credential expiry after dispatch triggers defined risk action.Wrongful recovery. Define monitor, stop/reassign and lender notice policy. Proof: Expiry-during-work scenario test. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- SAF-07Incorrect vehicle, damage, law enforcement and disputed recovery create protected exceptions.Wrongful recovery. Add/verify scenario-specific gates and playbooks. Proof: Golden + adversarial scenario results. Priority P0. Blocker YES.PARTIALAudit requirement
- SAF-08System/AI/scheduler/database outage fails safe for active cases.Wrongful recovery. Run multi-dependency failure exercises. Proof: Failure-injection logs and recovery proof. Priority P0. Blocker YES.UNVERIFIEDAudit requirement
- AIW-01Inventory all 12 AI employees with versioned operating contracts.AI workforce. Keep roster versioned and company-owned. Proof: Current bundle definition/fingerprint logic. Priority P1. Blocker NO.PROVENAudit requirement