Trust TRU-009

Evidence integrity

A conclusion is useful only when it can be traced. Domain Signals retains source class, observation time, responsibility, capability state and immutable references through every presentation.

Bounded, non-exploitative Authorised external assessment.

Bounded evidence. Explicit responsibility. No hidden inference.

The useful answer

Evidence integrity explains the control, evidence and limitation a reviewer should use when evaluating Domain Signals.

Evidence integrity explains the control, evidence and limitation a reviewer should use when evaluating Domain Signals. A conclusion is useful only when it can be traced. Domain Signals retains source class, observation time, responsibility, capability state and immutable references through every presentation.

Route-specific context

The decision this page is designed to support

01
Review audience
Assurance reviewer, security engineer
02
Control objective
Verify provenance, immutability and cross-surface consistency. Evidence integrity explains the control, evidence and limitation a reviewer should use when evaluating Domain Signals.
03
Proof boundary
The exact target, source, observation time, responsibility and evidence state remain available to entitled readers. Evidence basis: Cross-surface consistency tests.

A deliberate path

From permission to retained evidence

  1. 01

    Review the governed control described by evidence integrity.

  2. 02

    Trace each statement to its stated evidence basis, owner and review date.

  3. 03

    Carry the published limitation into procurement, assurance or technical interpretation rather than treating silence as approval.

Evidence before assertion

What the product can support

Every governed capability ends with an explicit disposition. Current observations can support a strength or an action; missing, stale or unavailable evidence remains an unknown and cannot become reassurance. The exact target, source, observation time, responsibility and evidence state remain available to entitled readers.

Supported capability

Action Brief, Signal Board, Assessment and Expert View are different presentations of the same sealed report evidence.

Cross-surface consistency tests

Binding boundary

Missing, stale, disputed or unavailable evidence cannot be treated as safety.

Capability reconciliation contract

Binding boundary

Provider or collector failure cannot improve a grade.

Grade guard and capability tests

Supported capability

Seven PDF publications plus CSV and JSON can be generated from the sealed report projection for entitled reports.

Export reconciliation tests

Direct answers

Questions a careful reader should ask

What does Evidence integrity establish?

Evidence integrity explains the control, evidence and limitation a reviewer should use when evaluating Domain Signals. It establishes only what the governed evidence supports.

What does it not establish?

It does not prove complete organisational security, exploitability, breach likelihood or the absence of unobserved weaknesses.

How can I verify the conclusion?

Use the linked evidence or capability record to inspect source, observation time, target, responsibility and the condition required for closure.