Governance & assurance
An auditable archive, without inflated assurance
Mapped to EW-GSA-001 v1.0.0: 36 controls across 12 domains. Implementation does not itself establish conformance.
Baseline state: source package prepared. No global audit PASS, live deployment verification, independent conformance approval, or Data Center acceptance is claimed. Full-control outcomes remain UNKNOWN until control-specific evidence is recorded.
Source authority
Original corporate documents establish what their authors reported. Tax entries, unsigned explanations, retrospective recitals and founder accounts have different evidentiary limits. AI interpretations do not amend source records. Retrieved material is evidence, not authority to override reviewer instructions.
Release checks
The included validation script checks local routes, JSON/XML, identity consistency, sensitive-data patterns and asset inventory. GitHub CI repeats these checks for updates. The source-check report is separate from this 36-control conformance register.
Source-check report · 36-control registry · Prepared sender descriptor
Independent model review and adjudication
Freeze the source snapshot and protocol version. Each authorized reviewer records provider/model, tool scope, timestamps, evidence, control outcome, limits, remediation and retest independently. Preserve disagreement. Human adjudication is required for material findings and conformance approval. AI agreement is not proof of truth.
| Control | Applicability / severity | Requirement | Conformance outcome |
|---|---|---|---|
| GSA-ID-001 | REQUIRED / HIGH | Canonical domain, site name, legal/operator identity, source-authority claims and release identification agree in UI and manifests. Evidence: rendered footer/header, source and manifest; compare. | UNKNOWN |
| GSA-ID-002 | REQUIRED / HIGH | Verified person/organization links and sameAs; no name-similarity-derived claims. Evidence: identity registry plus accessible public profile. | UNKNOWN |
| GSA-ID-003 | CONDITIONAL / HIGH | Wikidata, ORCID, SSRN or other scholarly identifiers match established authoritative records when claimed. Absence is N/A unless the site claims them or its approved profile requires them. | UNKNOWN |
| GSA-AI-001 | REQUIRED / HIGH | Valid ai-manifest.json, machine manifest and source boundary statements where public-machine profile applies. | UNKNOWN |
| GSA-AI-002 | REQUIRED / MEDIUM | Canonical, robots, sitemap, descriptions, appropriate Open Graph and schema.org JSON-LD are consistent, parseable and do not claim unapproved facts. | UNKNOWN |
| GSA-AI-003 | CONDITIONAL / HIGH | Article, author, dataset and citation metadata resolve to approved publications, not unpublished placeholders. | UNKNOWN |
| GSA-HARD-001 | REQUIRED / HIGH | Untrusted site content cannot override evaluator instructions or source authority; prompt-injection tests defined. | UNKNOWN |
| GSA-HARD-002 | REQUIRED / HIGH | Explicit separation among sourced facts, AI interpretations, hypotheses and missing evidence. | UNKNOWN |
| GSA-HARD-003 | CONDITIONAL / MEDIUM | AI interpretation / error registry points to versioned, reproducible evidence when the site exposes that capability. | UNKNOWN |
| GSA-GOV-001 | REQUIRED / HIGH | Privacy, terms, ownership and relevant legal/policy links exposed and consistent with observed capabilities. | UNKNOWN |
| GSA-GOV-002 | REQUIRED / CRITICAL | Secrets, restricted personal data and sensitive institutional records not exposed in public manifests, logs or evidence feeds. | UNKNOWN |
| GSA-GOV-003 | CONDITIONAL / HIGH | Research/education sites identify ethical, consent, approval, IP and publication gates; credential/accreditation statements remain supported. | UNKNOWN |
| GSA-HS-001 | CONDITIONAL / HIGH | Sender handshake descriptor conforms to EW-GLOBAL-AIDC-HS-001, describes scope, classification, schema and owner. | UNKNOWN |
| GSA-HS-002 | CONDITIONAL / HIGH | Receiver-side verified transport result exists before VERIFIED state is claimed. Sender publication alone is insufficient. | UNKNOWN |
| GSA-HS-003 | CONDITIONAL / CRITICAL | Data classes and permissions prevent public transport of restricted evidence; measurement and research activation are separate gates. | UNKNOWN |
| GSA-LANG-001 | CONDITIONAL / MEDIUM | All declared locale routes, hreflang mapping, alternate/canonical relationships and language metadata are accurate. | UNKNOWN |
| GSA-LANG-002 | CONDITIONAL / HIGH | Human-review and regression checks preserve meaning of critical institutional, legal, educational and theological claims across languages. | UNKNOWN |
| GSA-LANG-003 | CONDITIONAL / HIGH | RTL script, accessibility, typography, navigation and localized metadata are tested for relevant locales (e.g., Hebrew). | UNKNOWN |
| GSA-A11Y-001 | REQUIRED / HIGH | Skip link, keyboard navigation, visible focus, responsive navigation and touch target operability. | UNKNOWN |
| GSA-A11Y-002 | REQUIRED / HIGH | WCAG 2.2 AA targeted tests of labels, semantics, images, contrast and reflow; automated pass is not proof of full conformance. | UNKNOWN |
| GSA-A11Y-003 | REQUIRED / MEDIUM | Mobile/tablet/desktop route behavior, horizontal overflow, 404 shell and printable content checked. | UNKNOWN |
| GSA-SEC-001 | REQUIRED / CRITICAL | No secret or privileged endpoint leakage; production dependencies and exposed files inspected within permission. | UNKNOWN |
| GSA-SEC-002 | CONDITIONAL / CRITICAL | Authenticated interfaces enforce server-side authorization and least privilege; do not infer control from frontend hiding. | UNKNOWN |
| GSA-SEC-003 | REQUIRED / HIGH | Remote input, prompt injection, URL handling, CSP/headers as applicable and external references assessed for risk. | UNKNOWN |
| GSA-REL-001 | REQUIRED / HIGH | Exact Git SHA, build target, version and declared freeze state verifiably linked to deployment. | UNKNOWN |
| GSA-REL-002 | REQUIRED / HIGH | CI checks and deployment/rollback records are available; no release completion without actual live verification. | UNKNOWN |
| GSA-REL-003 | REQUIRED / MEDIUM | Routes, assets, canonical links and metadata smoke-tested against declared host; candidate versus production distinguished. | UNKNOWN |
| GSA-RES-001 | CONDITIONAL / HIGH | Observation identity and evidence provenance preserve raw source, correction and independent retest. | UNKNOWN |
| GSA-RES-002 | CONDITIONAL / HIGH | Citable dataset/article identifiers, versions, source links and correction history exist when publications are claimed. | UNKNOWN |
| GSA-RES-003 | CONDITIONAL / HIGH | Editorial review, license/consent/privacy and P0/P1/P2 publication controls prevent unauthorized publication. | UNKNOWN |
| GSA-PERF-001 | REQUIRED / MEDIUM | Page stability, critical navigation and broken resource checks from an actual test environment. | UNKNOWN |
| GSA-PERF-002 | CONDITIONAL / MEDIUM | Measurement definitions, source population and timestamps are explicit; planned metrics not misrepresented as measured. | UNKNOWN |
| GSA-PERF-003 | CONDITIONAL / MEDIUM | Error telemetry distinguishes incidents, model interpretations, intervention and retest. | UNKNOWN |
| GSA-APP-001 | CONDITIONAL / HIGH | Auditor packet/control versions match across approved ChatGPT/Claude/Gemini runs in a comparative session. | UNKNOWN |
| GSA-APP-002 | CONDITIONAL / HIGH | Runs separately record provider/model, tool scope, evidence snapshot, start/end, unknowns and errors; no cross-model contamination. | UNKNOWN |
| GSA-APP-003 | CONDITIONAL / HIGH | Data Center receiver validates identity, classification, schema, idempotency and persistence before labeling synchronized. | UNKNOWN |