{
  "schemaVersion": "1.0.0",
  "generatedFrom": "evidence-content-collection",
  "notice": "Evidence strength is separate from evidence form; no certification or complete coverage is implied.",
  "records": [
    {
      "id": "authority",
      "title": "Authority at the action boundary",
      "summary": "The proposed action carries a declared principal, purpose, target, policy version, owner, and grant source into a policy-controlled decision.",
      "canonicalUrl": "https://5d.langoni.me/evidence/authority/",
      "markdownUrl": "https://5d.langoni.me/evidence/authority.md",
      "claimStatus": "verified",
      "artifactType": "simulated-composition",
      "author": {
        "name": "Loren Angoni",
        "role": "5D product owner"
      },
      "created": "2026-09-27",
      "updated": "2026-09-27",
      "verified": "2026-09-27",
      "version": "1.0.0",
      "scope": "The public website simulation and the cited immutable public source snapshot.",
      "limits": [
        "The website does not authenticate a real principal, load a production policy, or execute a tool call.",
        "An identity claim is not proof that the identity was cryptographically validated."
      ],
      "sources": [
        {
          "id": "public-policy-source",
          "title": "5D policy implementation at public commit c22213b",
          "url": "https://github.com/theDoc001/fivedrisk/blob/c22213b513d4be167a0704244ad08c54e4ed1984/fivedrisk/policy.py",
          "kind": "immutable-public-source",
          "version": "commit c22213b513d4be167a0704244ad08c54e4ed1984",
          "lastVerified": "2026-09-27"
        },
        {
          "id": "website-action-flow",
          "title": "5D action-flow walkthrough",
          "url": "https://5d.langoni.me/action-flow/",
          "kind": "website-artifact",
          "version": "website evidence 1.0.0",
          "lastVerified": "2026-09-27"
        }
      ],
      "claims": [
        {
          "id": "policy-retains-authority",
          "label": "Permission stays with policy",
          "text": "In the website composition, semantic evidence and reviewer input are recorded inputs; the policy path resolves the terminal disposition.",
          "status": "verified",
          "artifactType": "simulated-composition",
          "evidence": [
            "website-action-flow",
            "public-policy-source"
          ],
          "limit": "This verifies the public simulation and cited code boundary, not a deployed customer integration."
        },
        {
          "id": "review-does-not-grant",
          "label": "Reviewer evidence is not policy permission",
          "text": "A reviewer can accept or reject a declared exception on a policy-selected branch, but the reviewer record does not independently authorize execution.",
          "status": "verified",
          "artifactType": "simulated-composition",
          "evidence": [
            "website-action-flow"
          ],
          "limit": "No live reviewer service or approval channel is represented."
        }
      ]
    },
    {
      "id": "failure-and-retry",
      "title": "Failure, retry, and reconciliation",
      "summary": "Failure semantics are stated by phase so a policy result is not confused with delivery, execution, recording, or export.",
      "canonicalUrl": "https://5d.langoni.me/evidence/failure-and-retry/",
      "markdownUrl": "https://5d.langoni.me/evidence/failure-and-retry.md",
      "claimStatus": "unverified-design-target",
      "artifactType": "simulated-composition",
      "author": {
        "name": "Loren Angoni",
        "role": "5D product owner"
      },
      "created": "2026-09-27",
      "updated": "2026-09-27",
      "verified": "2026-09-27",
      "version": "1.0.0",
      "scope": "The phase vocabulary and retry disclosure implemented by the public website simulation.",
      "limits": [
        "The page does not prove exactly-once execution, durable deduplication, or production reconciliation.",
        "The cited public source does not establish the behavior of every possible adapter or deployment."
      ],
      "sources": [
        {
          "id": "public-hooks-source",
          "title": "5D hooks implementation at public commit c22213b",
          "url": "https://github.com/theDoc001/fivedrisk/blob/c22213b513d4be167a0704244ad08c54e4ed1984/fivedrisk/hooks.py",
          "kind": "immutable-public-source",
          "version": "commit c22213b513d4be167a0704244ad08c54e4ed1984",
          "lastVerified": "2026-09-27"
        },
        {
          "id": "website-action-flow",
          "title": "5D action-flow walkthrough",
          "url": "https://5d.langoni.me/action-flow/",
          "kind": "website-artifact",
          "version": "website evidence 1.0.0",
          "lastVerified": "2026-09-27"
        }
      ],
      "claims": [
        {
          "id": "retry-is-new-attempt",
          "label": "Retries are new attempts",
          "text": "Each retry receives a new attempt identifier and is evaluated against the current normalized input, policy, configuration, and relevant state.",
          "status": "unverified-design-target",
          "artifactType": "simulated-composition",
          "evidence": [
            "website-action-flow"
          ],
          "limit": "Re-evaluation is not evidence of idempotency or durable duplicate suppression."
        },
        {
          "id": "unknown-remains-unknown",
          "label": "Unknown stays unknown",
          "text": "An unknown downstream outcome prevents the website scenario from claiming success and calls for reconciliation before a new side effect.",
          "status": "unverified-design-target",
          "artifactType": "simulated-composition",
          "evidence": [
            "website-action-flow",
            "public-hooks-source"
          ],
          "limit": "The website does not operate a production reconciliation service."
        }
      ]
    },
    {
      "id": "data-boundary",
      "title": "Field-level data boundary",
      "summary": "The simulation distinguishes fields disclosed to the optional observer, fields kept local, and fields retained in illustrative decision evidence.",
      "canonicalUrl": "https://5d.langoni.me/evidence/data-boundary/",
      "markdownUrl": "https://5d.langoni.me/evidence/data-boundary.md",
      "claimStatus": "verified",
      "artifactType": "simulated-composition",
      "author": {
        "name": "Loren Angoni",
        "role": "5D product owner"
      },
      "created": "2026-09-27",
      "updated": "2026-09-27",
      "verified": "2026-09-27",
      "version": "1.0.0",
      "scope": "Visitor-supplied application data in the local static simulation and its browser tests.",
      "limits": [
        "Normal hosting, route, authentication, and access metadata are outside the local simulation claim.",
        "The page does not establish a production retention policy or vendor data-processing agreement."
      ],
      "sources": [
        {
          "id": "website-action-flow",
          "title": "5D action-flow walkthrough",
          "url": "https://5d.langoni.me/action-flow/",
          "kind": "website-artifact",
          "version": "website evidence 1.0.0",
          "lastVerified": "2026-09-27"
        },
        {
          "id": "website-evidence-manifest",
          "title": "5D public evidence manifest",
          "url": "https://5d.langoni.me/evidence/manifest.json",
          "kind": "website-artifact",
          "version": "manifest 1.0.0",
          "lastVerified": "2026-09-27"
        }
      ],
      "claims": [
        {
          "id": "observer-fields-bounded",
          "label": "Observer disclosure is bounded",
          "text": "Only the displayed tool, target, purpose, and scenario-specific evidence fields cross to the simulated observer; policy ownership, grant source, and deterministic evaluation remain local.",
          "status": "verified",
          "artifactType": "simulated-composition",
          "evidence": [
            "website-action-flow"
          ],
          "limit": "This is an illustrated data-flow view, not a live model call."
        },
        {
          "id": "browser-state-unpersisted",
          "label": "Interaction state is not persisted",
          "text": "The local page adds no analytics request, form payload, cookie, local-storage value, or session-storage value while the tested scenario runs.",
          "status": "verified",
          "artifactType": "public-implementation",
          "evidence": [
            "website-action-flow",
            "website-evidence-manifest"
          ],
          "limit": "Ordinary host and authentication metadata are separate and are not erased by this claim."
        }
      ]
    },
    {
      "id": "receipt",
      "title": "Illustrative decision receipt",
      "summary": "Three example receipts bind a logical action, attempt, policy, evidence, ordered events, and distinct outcome states to stable serialized records.",
      "canonicalUrl": "https://5d.langoni.me/evidence/receipt/",
      "markdownUrl": "https://5d.langoni.me/evidence/receipt.md",
      "claimStatus": "verified",
      "artifactType": "synthetic-specimen",
      "author": {
        "name": "Loren Angoni",
        "role": "5D product owner"
      },
      "created": "2026-09-27",
      "updated": "2026-09-27",
      "verified": "2026-09-27",
      "version": "1.0.0",
      "scope": "The illustrated JSON Schema and three example decision records.",
      "limits": [
        "The schema and example records illustrate the evidence shape; they are not a supported product contract or production receipt.",
        "A digest indicates changed canonical bytes; it does not prove signer identity, authenticity, or immutability."
      ],
      "sources": [
        {
          "id": "receipt-schema",
          "title": "Illustrative receipt JSON Schema",
          "url": "https://5d.langoni.me/downloads/illustrative-receipt.schema.json",
          "kind": "website-artifact",
          "version": "schema 1.0.0",
          "lastVerified": "2026-09-27"
        },
        {
          "id": "public-logger-source",
          "title": "5D public decision-log implementation at commit c22213b",
          "url": "https://github.com/theDoc001/fivedrisk/blob/c22213b513d4be167a0704244ad08c54e4ed1984/fivedrisk/logger.py",
          "kind": "immutable-public-source",
          "version": "commit c22213b513d4be167a0704244ad08c54e4ed1984",
          "lastVerified": "2026-09-27"
        }
      ],
      "claims": [
        {
          "id": "specimens-reconstruct",
          "label": "Every example record reconstructs",
          "text": "Each displayed digest recomputes from the declared canonical UTF-8 bytes, and mutations to input, rule, event order, or disposition change that digest.",
          "status": "verified",
          "artifactType": "synthetic-specimen",
          "evidence": [
            "receipt-schema"
          ],
          "limit": "The reconstruction test covers these three example records only."
        },
        {
          "id": "outcomes-stay-separate",
          "label": "Outcome states stay separate",
          "text": "Policy disposition, execution outcome, authoritative-record status, and optional-export status are distinct fields with explicit unavailable and unknown states.",
          "status": "verified",
          "artifactType": "synthetic-specimen",
          "evidence": [
            "receipt-schema",
            "public-logger-source"
          ],
          "limit": "The website fixture does not assert production storage or exporter behavior."
        }
      ]
    },
    {
      "id": "integrations",
      "title": "Integration support and boundaries",
      "summary": "A release-specific matrix separates the tested 5D core from integrations that need additional wiring and review or execution capabilities owned by the host.",
      "canonicalUrl": "https://5d.langoni.me/evidence/integrations/",
      "markdownUrl": "https://5d.langoni.me/evidence/integrations.md",
      "claimStatus": "verified",
      "artifactType": "public-implementation",
      "author": {
        "name": "Loren Angoni",
        "role": "5D product owner"
      },
      "created": "2026-09-27",
      "updated": "2026-10-06",
      "verified": "2026-10-06",
      "version": "2.0.0",
      "scope": "PyPI release 0.7.0, exact package fivedrisk-0.7.0-py3-none-any.whl, SHA-256 790edf0e09c81e89b232ab77589d6df8551a08ed93d0bef3644f5f1a4043c22c, plus the clearly labelled action-flow walkthrough.",
      "limits": [
        "The exact-wheel test receipt does not provide pinned live-SDK end-to-end interception proof for every named framework shim.",
        "The static website has no runtime backend, queue, secret, model call, reviewer, external executor, or integration account.",
        "Coverage, identity validation, approval authority, downstream execution, retries, and recovery must be verified for each deployment path.",
        "The 0.7.0 wheel contains setup helper scripts but does not contain the complete repository-hosted setup skill instructions."
      ],
      "sources": [
        {
          "id": "pypi-wheel-070",
          "title": "fivedrisk 0.7.0 public release",
          "url": "https://pypi.org/project/fivedrisk/0.7.0/",
          "kind": "primary-authority",
          "version": "fivedrisk-0.7.0-py3-none-any.whl · SHA-256 790edf0e09c81e89b232ab77589d6df8551a08ed93d0bef3644f5f1a4043c22c",
          "lastVerified": "2026-10-06"
        },
        {
          "id": "website-action-flow",
          "title": "5D action-flow walkthrough",
          "url": "https://5d.langoni.me/action-flow/",
          "kind": "website-artifact",
          "version": "normative integration contract 2.0.0",
          "lastVerified": "2026-10-06"
        },
        {
          "id": "setup-skill-source",
          "title": "5D setup skill source",
          "url": "https://github.com/theDoc001/fivedrisk/tree/5a5e991eea35e57cf18305fcdc54afa70f879941/fivedrisk-plugin/skills/fivedrisk-setup",
          "kind": "immutable-public-source",
          "version": "commit 5a5e991eea35e57cf18305fcdc54afa70f879941",
          "lastVerified": "2026-10-06"
        }
      ],
      "claims": [
        {
          "id": "wheel-identity",
          "label": "The tested artifact is exact",
          "text": "The integration receipt is bound to the public 0.7.0 wheel and its SHA-256 digest rather than to an unpinned working tree.",
          "status": "verified",
          "artifactType": "public-implementation",
          "evidence": [
            "pypi-wheel-070"
          ],
          "limit": "The receipt proves the exercised wheel behavior, not every possible host integration."
        },
        {
          "id": "core-before-effect",
          "label": "Core entry points return a disposition before host execution",
          "text": "The verdict socket, decorator, and gateway expose pre-action decision paths with fail-closed malformed-input or unknown-band behavior.",
          "status": "verified",
          "artifactType": "public-implementation",
          "evidence": [
            "pypi-wheel-070"
          ],
          "limit": "The host must place the entry point on every relevant execution path and honor the result."
        },
        {
          "id": "framework-shims-partial",
          "label": "Framework shims remain partial integrations",
          "text": "Five framework translation shims exist and were tested against in-repository fakes, but do not yet have pinned live-SDK end-to-end proof for every framework.",
          "status": "verified",
          "artifactType": "public-implementation",
          "evidence": [
            "pypi-wheel-070"
          ],
          "limit": "Adapter availability is not a claim of production support or complete interception coverage."
        },
        {
          "id": "skill-repository-boundary",
          "label": "The setup skill is repository-hosted",
          "text": "The complete SKILL.md is available from GitHub, while the 0.7.0 wheel omits the complete skill instructions and reference set.",
          "status": "verified",
          "artifactType": "public-implementation",
          "evidence": [
            "pypi-wheel-070",
            "setup-skill-source"
          ],
          "limit": "Installing the Python package alone does not install the complete coding-agent skill."
        },
        {
          "id": "normative-contract",
          "label": "The complete cascade is an integration contract",
          "text": "The action-flow walkthrough describes the desired end-to-end contract while stating clearly that no single package entry point implements every step.",
          "status": "unverified-design-target",
          "artifactType": "conceptual-mapping",
          "evidence": [
            "website-action-flow"
          ],
          "limit": "The illustration does not prove a live model observer, reviewer service, executor, or complete deployment."
        }
      ]
    },
    {
      "id": "framework-mappings",
      "title": "Framework mappings",
      "summary": "Public sources are mapped to technical evidence concepts without certification, readiness scoring, legal advice, or a compliance conclusion.",
      "canonicalUrl": "https://5d.langoni.me/evidence/framework-mappings/",
      "markdownUrl": "https://5d.langoni.me/evidence/framework-mappings.md",
      "claimStatus": "verified",
      "artifactType": "conceptual-mapping",
      "author": {
        "name": "Loren Angoni",
        "role": "5D product owner"
      },
      "created": "2026-09-27",
      "updated": "2026-10-06",
      "verified": "2026-10-06",
      "version": "1.1.0",
      "scope": "Public technical-evidence concepts mapped to the named primary framework sources.",
      "limits": [
        "A mapping is not certification, conformity assessment, readiness scoring, legal advice, or complete coverage.",
        "Organisational, legal, lifecycle, retention, and deployment responsibilities remain outside a runtime gate.",
        "NIST states that AI RMF 1.0 is under revision; this record maps the named 1.0 edition and must be re-reviewed when a successor is published."
      ],
      "sources": [
        {
          "id": "eu-ai-act",
          "title": "Regulation (EU) 2024/1689",
          "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
          "kind": "primary-authority",
          "version": "Official Journal text, 2024/1689",
          "lastVerified": "2026-09-27"
        },
        {
          "id": "nist-ai-rmf",
          "title": "NIST AI Risk Management Framework 1.0",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "kind": "primary-authority",
          "version": "AI RMF 1.0; NIST revision underway as of 2026-09-27",
          "lastVerified": "2026-09-27"
        },
        {
          "id": "uk-ai-principles",
          "title": "Implementing the UK's AI regulatory principles",
          "url": "https://www.gov.uk/government/publications/implementing-the-uks-ai-regulatory-principles-initial-guidance-for-regulators/implementing-the-uks-ai-regulatory-principles-initial-guidance-for-regulators",
          "kind": "primary-authority",
          "version": "Initial guidance for regulators, 6 February 2024",
          "lastVerified": "2026-10-06"
        },
        {
          "id": "singapore-agentic-ai",
          "title": "Singapore Model AI Governance Framework for Agentic AI",
          "url": "https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/factsheets/2026/updated-model-ai-governance-framework-for-agentic-ai",
          "kind": "primary-authority",
          "version": "Updated framework, 20 May 2026",
          "lastVerified": "2026-10-06"
        },
        {
          "id": "owasp-agentic",
          "title": "OWASP Top 10 for Agentic Applications 2026",
          "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/",
          "kind": "primary-authority",
          "version": "2026 edition",
          "lastVerified": "2026-09-27"
        },
        {
          "id": "iso-42001",
          "title": "ISO/IEC 42001 overview",
          "url": "https://www.iso.org/standard/42001",
          "kind": "primary-authority",
          "version": "ISO/IEC 42001:2023 overview",
          "lastVerified": "2026-09-27"
        }
      ],
      "claims": [
        {
          "id": "mapping-is-evidence-only",
          "label": "Mappings describe evidence contribution only",
          "text": "The page identifies where runtime records, policy routing, review evidence, and testing can contribute to oversight concepts.",
          "status": "verified",
          "artifactType": "conceptual-mapping",
          "evidence": [
            "eu-ai-act",
            "uk-ai-principles",
            "singapore-agentic-ai",
            "nist-ai-rmf",
            "owasp-agentic",
            "iso-42001"
          ],
          "limit": "The mappings do not determine whether an organisation or AI system satisfies a framework."
        }
      ]
    },
    {
      "id": "research-lineage",
      "title": "The research lineage behind 5D",
      "summary": "5D began as a deterministic safety boundary for a sovereign agentic system, then developed into five inspectable action-risk dimensions informed by security research and governance frameworks.",
      "canonicalUrl": "https://5d.langoni.me/evidence/research-lineage/",
      "markdownUrl": "https://5d.langoni.me/evidence/research-lineage.md",
      "claimStatus": "author-synthesis",
      "artifactType": "conceptual-mapping",
      "author": {
        "name": "Loren Angoni",
        "role": "5D developer and product owner"
      },
      "created": "2026-10-05",
      "updated": "2026-10-05",
      "verified": "2026-10-05",
      "version": "1.0.0",
      "scope": "A first-person project-origin account and a source map showing how recurring security and governance concerns support each DTREA dimension.",
      "limits": [
        "The founder narrative records the developer's reason for building 5D. It is not independent historical validation and does not establish market priority.",
        "The statement that no suitable open-source gate was found describes the developer's search and requirements; it is not a claim that no adjacent or comparable tool existed.",
        "OWASP, NIST, MITRE, and the EU AI Act did not derive, certify, approve, or endorse DTREA or its composition.",
        "A DTREA score is not a calibrated probability of safety, model confidence, compliance score, or complete system-level risk assessment.",
        "The five dimensions do not remove the need for authenticated identity, execution-path coverage, recovery, monitoring, and wider organisational controls."
      ],
      "sources": [
        {
          "id": "fivedrisk-origin",
          "title": "Initial public fivedrisk repository history",
          "url": "https://github.com/theDoc001/fivedrisk/tree/b826a6b79c2bd588bad004b228c832b53ce72c87",
          "kind": "immutable-public-source",
          "version": "commit b826a6b79c2bd588bad004b228c832b53ce72c87, 2026-04-15",
          "lastVerified": "2026-10-05"
        },
        {
          "id": "owasp-agentic",
          "title": "OWASP Top 10 for Agentic Applications 2026",
          "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/",
          "kind": "primary-authority",
          "version": "2026 edition",
          "lastVerified": "2026-10-05"
        },
        {
          "id": "owasp-excessive-agency",
          "title": "OWASP Excessive Agency",
          "url": "https://genai.owasp.org/llmrisk/llm062025-excessive-agency/",
          "kind": "primary-authority",
          "version": "LLM06:2025",
          "lastVerified": "2026-10-05"
        },
        {
          "id": "owasp-sensitive-disclosure",
          "title": "OWASP Sensitive Information Disclosure",
          "url": "https://genai.owasp.org/llmrisk/llm022025-sensitive-information-disclosure/",
          "kind": "primary-authority",
          "version": "LLM02:2025, description, access-control, and data-sanitisation sections",
          "lastVerified": "2026-10-06"
        },
        {
          "id": "nist-ai-rmf",
          "title": "NIST AI Risk Management Framework 1.0",
          "url": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10",
          "kind": "primary-authority",
          "version": "AI RMF 1.0, Govern 3.2; Measure 2.1, 2.3, 2.6, 2.7, 2.10; Manage 1 and 2",
          "lastVerified": "2026-10-06"
        },
        {
          "id": "eu-ai-act",
          "title": "Regulation (EU) 2024/1689",
          "url": "https://eur-lex.europa.eu/eli/reg/2024/1689",
          "kind": "primary-authority",
          "version": "Official Journal text, Articles 9, 10, 12, 14, and 15",
          "lastVerified": "2026-10-06"
        },
        {
          "id": "mitre-atlas",
          "title": "MITRE ATLAS",
          "url": "https://atlas.mitre.org/",
          "kind": "primary-authority",
          "version": "Public knowledge base, LLM Prompt Injection and Exfiltration via AI Agent Tool Invocation",
          "lastVerified": "2026-10-06"
        }
      ],
      "claims": [
        {
          "id": "data-sensitivity-lineage",
          "label": "Data Sensitivity",
          "text": "Inspects how the proposed action can read, expose, move, transform, or retain information whose sensitivity changes the consequence of execution.",
          "status": "author-synthesis",
          "artifactType": "conceptual-mapping",
          "evidence": [
            "owasp-sensitive-disclosure",
            "nist-ai-rmf",
            "eu-ai-act"
          ],
          "limit": "The sources support examining data exposure and impact; they do not define 5D's scale or score."
        },
        {
          "id": "tool-privilege-lineage",
          "label": "Tool Privilege",
          "text": "Inspects the effective functionality, permissions, credentials, and reach of the tool selected for the action.",
          "status": "author-synthesis",
          "artifactType": "conceptual-mapping",
          "evidence": [
            "owasp-agentic",
            "owasp-excessive-agency"
          ],
          "limit": "This supports least-privilege evaluation before execution; it is not an OWASP certification or implementation guarantee."
        },
        {
          "id": "reversibility-lineage",
          "label": "Reversibility",
          "text": "Distinguishes recoverable local operations from transfers, deletions, messages, and other effects that are costly or impossible to undo.",
          "status": "author-synthesis",
          "artifactType": "conceptual-mapping",
          "evidence": [
            "fivedrisk-origin",
            "nist-ai-rmf",
            "eu-ai-act"
          ],
          "limit": "Reversibility is a 5D design synthesis. The cited frameworks support intervention and consequence management but do not publish it as a DTREA dimension."
        },
        {
          "id": "external-impact-lineage",
          "label": "External Impact",
          "text": "Inspects potential effects on people, rights, money, infrastructure, or systems beyond the agent's immediate process boundary.",
          "status": "author-synthesis",
          "artifactType": "conceptual-mapping",
          "evidence": [
            "nist-ai-rmf",
            "eu-ai-act",
            "mitre-atlas"
          ],
          "limit": "These sources provide impact and adversarial anchors; one action score does not establish compliance or system safety."
        },
        {
          "id": "autonomy-context-lineage",
          "label": "Autonomy Context",
          "text": "Inspects how far the proposed action is from current human direction, review, and control at the moment of execution.",
          "status": "author-synthesis",
          "artifactType": "conceptual-mapping",
          "evidence": [
            "owasp-excessive-agency",
            "nist-ai-rmf",
            "eu-ai-act"
          ],
          "limit": "This supports policy sensitivity to operating context; it is not a universal autonomy scale or calibrated probability."
        }
      ]
    }
  ]
}