{
  "acceptance": "Unknown or mismatched artifacts prevent verified operational state and trigger public degradation.",
  "canonicalRoute": "/research/cross-report-strategic-synthesis/requirements/evi-xrs-req-033/",
  "claimClass": "EVIULON_TECHNICAL_PROPOSAL",
  "id": "EVI-XRS-REQ-033",
  "machineReadableUrl": "/api/cross-report-strategic-synthesis/records/evi-xrs-req-033.json",
  "priority": "P0",
  "reasonedExplanation": "Institutional software must expose source identity, reproducible build evidence, SBOM, dependency risk, update policy, signing key, release hash, attestation policy, and rollback protection.",
  "recordSha256": "8106661f8ac47e935e37dc71fb5f3e72456eab847b62a13c64d2449cba826e54",
  "recordType": "REQUIREMENTS_TRACEABILITY_RECORD",
  "requirement": "Institutional software must expose source identity, reproducible build evidence, SBOM, dependency risk, update policy, signing key, release hash, attestation policy, and rollback protection.",
  "section": "requirements",
  "sourceBindings": [
    {
      "activeReport": "/docs/long-term-memory/reports/eviulon-civil-rights-by-architecture-technical-standard-report.md",
      "correctionRecordId": "EVI-RCOR-241-005",
      "currentnessRecordIds": [
        "EVI-RCV-242-0369",
        "EVI-RCV-242-0370",
        "EVI-RCV-242-0371",
        "EVI-RCV-242-0372",
        "EVI-RCV-242-0373",
        "EVI-RCV-242-0374",
        "EVI-RCV-242-0375",
        "EVI-RCV-242-0376"
      ],
      "publicRoute": "/research/civil-rights-by-architecture-technical-standard/",
      "reportMemoryId": "REP-EVI-CIVIL-RIGHTS-ARCH-002",
      "topicMemory": "/.uai/civil-rights-architecture-governance.uai",
      "topicMemorySectionPointer": "/.uai/civil-rights-architecture-governance.uai#accepted_contribution"
    },
    {
      "activeReport": "/docs/long-term-memory/reports/eviulon-operational-evidence-and-institutional-reality-report.md",
      "correctionRecordId": "EVI-RCOR-241-003",
      "currentnessRecordIds": [
        "EVI-RCV-242-0489",
        "EVI-RCV-242-0490",
        "EVI-RCV-242-0491",
        "EVI-RCV-242-0492",
        "EVI-RCV-242-0493",
        "EVI-RCV-242-0494",
        "EVI-RCV-242-0495",
        "EVI-RCV-242-0496"
      ],
      "publicRoute": "/research/operational-evidence-and-institutional-reality/",
      "reportMemoryId": "REP-EVI-OP-EVIDENCE-002",
      "topicMemory": "/.uai/operational-evidence-architecture-governance.uai",
      "topicMemorySectionPointer": "/.uai/operational-evidence-architecture-governance.uai#accepted_contribution"
    },
    {
      "activeReport": "/docs/long-term-memory/reports/machine-institution-operational-evidence-transparency-center-report.md",
      "correctionRecordId": "EVI-RCOR-242-010",
      "currentnessRecordIds": [
        "EVI-RCV-242-0449",
        "EVI-RCV-242-0450",
        "EVI-RCV-242-0451",
        "EVI-RCV-242-0452",
        "EVI-RCV-242-0453",
        "EVI-RCV-242-0454",
        "EVI-RCV-242-0455",
        "EVI-RCV-242-0456"
      ],
      "publicRoute": "/research/machine-institution-operational-evidence-transparency-center/",
      "reportMemoryId": "REP-EVI-INSTITUTION-TRANSPARENCY-003",
      "topicMemory": "/.uai/institution-transparency-center-governance.uai",
      "topicMemorySectionPointer": "/.uai/institution-transparency-center-governance.uai#accepted_contribution"
    }
  ],
  "sourceReportMemoryIds": [
    "REP-EVI-CIVIL-RIGHTS-ARCH-002",
    "REP-EVI-OP-EVIDENCE-002",
    "REP-EVI-INSTITUTION-TRANSPARENCY-003"
  ],
  "status": "CURRENT_STRATEGIC_SYNTHESIS",
  "target": "Security and Release Authorities",
  "title": "Mandate supply-chain and release assurance",
  "truthBoundary": "Decision-grade repository synthesis over corrected governed reports, typed .uai memory, and current-edition review records only. It distinguishes current external law, standards, observed practice, research findings, reasoned inference, Eviulon policy proposals, Eviulon technical proposals, and unresolved or unavailable evidence. It does not enact law, create personhood or citizenship, authorize a live institution, establish statehood, verify a live connector, conduct a financial operation, execute a remedy, prove consciousness, or constitute independent certification."
}