Documentation

Rendered from the repository, not copied into it. Each of these is the working document the project uses.

Audit trail

The bundle, the ledger, signing, verification, anchoring, and the limits of each

Controls

Control by control: what is checked, at what severity, from which source

Privacy

What personal information evidence carries, measured rather than described

Operations

Onboarding, protection settings, waivers, policy changes, upgrades