Process and evidence integrity

Decision Passport · 9

Specification

The specification is public and versioned with the code. Both verifiers implement it independently; the shared conformance fixtures are the test of agreement.

1.Documents

docs/DECISION_PASSPORT_SPEC.mdThe bundle specification: canonical JSON, the seven artifacts, every verifier check, signatures and keys, the verifier report (§5), workspace records (§5a) and Deep Analysis passports (§5b).
docs/PASSPORT_POLICY.mdThe Passport Policy, generated from the versioned source.
docs/INDEPENDENT_VERIFICATION.mdThe Go verifier, the conformance fixtures and how to run them offline.
docs/STANDARDS_MAPPING.mdData-format and framework mappings (not certifications).
docs/EVIDENCE_WORKFLOW_E2E.mdThe private workspace, its two-person rule and its database rules.

2.Deep Analysis passports (§5b)

Formatdeep-analysis-passport/1
Rulesetam-passport-issuance/1
Record engineam-da-passport-1.0.0, source src/lib/passport/record/v1, SHA-256 e4aeeaee88bf75c5fdab40971bd6fa5162fe4614afe326ddf0b067b22ce12d1e
State{ v: "P1", k: "deep-analysis-passport", tenant, d: draft id, s: status, t: time, a: {} }
Signed whenOnly status issued; issued_at equals state.t.
Revocation listabrahammoses-passport-revocations version 1; signed bytes "AbrahamMoses revocation list v1\n" + list_sha256 + "\n" + kid + "\n" + issued_at

Disclaimer. A passport attests to process and evidence integrity, not legal correctness. It is not legal advice, not a qualified electronic signature or seal, and not a certification; no regulatory approval is claimed.