{"change_events":[{"change_event_id":"EV-CHG-0056-001","change_type":"ADD","changed_claim_ids":["EVI-INST-0002"],"new_state":"Substantive Institutional Company resource","previous_state":"Sparse Company presentation","public_explanation":"Company content was expanded without inventing legal entity, ownership, staffing, or external-adoption facts.","reason":"Publish a substantial repository-grounded Company page.","release":"2.0.0-rc.56-WIP","review_boundary":"Repository and representative-browser scope; no actual-host convergence claim","source_record":"docs/INSTITUTIONAL_PAGES_EXPANSION_RC56.md","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-002","change_type":"ADD","changed_claim_ids":["EVI-INST-0003"],"new_state":"Twelve developed design positions","previous_state":"Short principle statements","public_explanation":"Each principle now states its meaning, practical effect, and boundary.","reason":"Publish bounded Institutional principles with practical and non-meaning fields.","release":"2.0.0-rc.56-WIP","review_boundary":"Declared doctrine; not universal fact or enacted law","source_record":"docs/INSTITUTIONAL_PAGES_EXPANSION_RC56.md","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-003","change_type":"CLARIFY","changed_claim_ids":["EVI-INST-0004"],"new_state":"Categorized public routing with explicit prohibited submissions","previous_state":"Generic contact form","public_explanation":"The contact page now explains what to include and what not to send.","reason":"Explain the one verified public contact route and safe submission boundaries.","release":"2.0.0-rc.56-WIP","review_boundary":"No response-time, department, address, or staff claim","source_record":"app/blueprints/contact/routes.py","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-004","change_type":"QUALIFY","changed_claim_ids":["EVI-INST-0006"],"new_state":"Repository-bounded runtime statement with host limitations","previous_state":"Broad privacy statement","public_explanation":"The privacy statement now distinguishes packaged source from hosting and deployed behavior.","reason":"State the repository-visible absence of named third-party analytics without universalizing the claim.","release":"2.0.0-rc.56-WIP","review_boundary":"Packaged first-party source only","source_record":"app/templates/institutional/privacy.html","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-005","change_type":"CLARIFY","changed_claim_ids":["EVI-INST-0007"],"new_state":"Submission and passive-browsing states described separately","previous_state":"Collection behavior not fully explained","public_explanation":"Visitor-supplied contact data is treated as a separate processing event.","reason":"Separate voluntary contact submissions from passive browsing.","release":"2.0.0-rc.56-WIP","review_boundary":"Production database and logs not observed","source_record":"app/models.py","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-006","change_type":"QUALIFY","changed_claim_ids":["EVI-INST-0009"],"new_state":"Target, testing, alternative-representation, and limitation sections","previous_state":"Short accessibility statement","public_explanation":"Accessibility is presented as an engineering target with known limitations.","reason":"Preserve WCAG 2.2 Level AA as a target rather than certification.","release":"2.0.0-rc.56-WIP","review_boundary":"No certification or complete-conformance claim","source_record":"app/templates/institutional/accessibility.html","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-007","change_type":"ADD","changed_claim_ids":["EVI-INST-0011"],"new_state":"CSRF source fact published with deployment limitation","previous_state":"Security page did not identify the bounded CSRF source fact","public_explanation":"The security page separates source control from deployed-host state.","reason":"Document repository-supported browser-form security controls.","release":"2.0.0-rc.56-WIP","review_boundary":"Source implementation, not actual-host enforcement","source_record":"app/forms.py","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-008","change_type":"QUALIFY","changed_claim_ids":["EVI-INST-0012"],"new_state":"Source and actual-host boundaries separated","previous_state":"Header behavior described generally","public_explanation":"Application middleware evidence does not substitute for final response evidence.","reason":"Describe security-header logic without claiming final proxy output.","release":"2.0.0-rc.56-WIP","review_boundary":"Final public headers require host observation","source_record":"app/security.py","supersedes_event_id":null},{"change_event_id":"EV-CHG-0056-009","change_type":"ADD","changed_claim_ids":["EVI-INST-0014"],"new_state":"Explicit hash, reference, test, demonstration, and interface limits","previous_state":"Generic demonstration boundary","public_explanation":"Technical records now state what they prove and what they do not.","reason":"Add a public no-false-evidentiary-inference rule.","release":"2.0.0-rc.56-WIP","review_boundary":"Public-use design position, not governing law","source_record":"app/templates/institutional/terms.html","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-001","change_type":"CLARIFY","changed_claim_ids":["EVI-INST-0001"],"new_state":"Institutional directory plus stable claim records and change lineage","previous_state":"Institutional directory without a claim-level public ledger","public_explanation":"Visitors can now inspect support class, source, scope, limitations, and change history claim by claim.","reason":"Link the Institutional directory to a public evidence and change-history surface.","release":"2.0.0-rc.57-WIP","review_boundary":"Repository package and separately identified actual-host observations","source_record":"app/templates/institutional/evidence.html","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-002","change_type":"ADD","changed_claim_ids":["EVI-INST-0005"],"new_state":"NOT_ESTABLISHED claim record","previous_state":"Not separately indexed","public_explanation":"Unknown information is recorded instead of inferred from the presence of a contact form.","reason":"Make the absence of a verified public response-time commitment explicit.","release":"2.0.0-rc.57-WIP","review_boundary":"Reviewed public package only","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-003","change_type":"QUALIFY","changed_claim_ids":["EVI-INST-0008"],"new_state":"Repository default separated from actual-host enforcement","previous_state":"Retention default described without claim-level ledger record","public_explanation":"The ledger exposes both the configured default and the missing production observation.","reason":"Prevent an environment-overridable source default from being presented as live retention behavior.","release":"2.0.0-rc.57-WIP","review_boundary":"Source default only","source_record":"app/config.py","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-004","change_type":"ADD","changed_claim_ids":["EVI-INST-0010"],"new_state":"Stable NOT_ESTABLISHED claim record","previous_state":"Boundary stated in prose only","public_explanation":"Automated and representative checks are not converted into certification.","reason":"Record accessibility certification as not established.","release":"2.0.0-rc.57-WIP","review_boundary":"Public package and acceptance evidence","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-005","change_type":"ADD","changed_claim_ids":["EVI-INST-0013"],"new_state":"Stable NOT_ESTABLISHED claim record","previous_state":"Security boundary stated in page prose","public_explanation":"The ledger distinguishes no public evidence from proof of absence.","reason":"Record absent security-program evidence without asserting nonexistence.","release":"2.0.0-rc.57-WIP","review_boundary":"Public package only","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-006","change_type":"ADD","changed_claim_ids":["EVI-INST-0015"],"new_state":"Stable NOT_ESTABLISHED legal-status record","previous_state":"Boundary stated across page prose","public_explanation":"Interface prominence and company language do not create a registration record.","reason":"Prevent company branding from being treated as proof of legal entity status.","release":"2.0.0-rc.57-WIP","review_boundary":"Public package only","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-007","change_type":"ADD","changed_claim_ids":["EVI-INST-0016"],"new_state":"Stable NOT_ESTABLISHED organization record","previous_state":"Not separately indexed","public_explanation":"Unknown organization facts remain unknown until exact evidence is published.","reason":"Prevent visitors from inferring ownership, officers, or staffing from the site.","release":"2.0.0-rc.57-WIP","review_boundary":"Public package only","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-008","change_type":"ADD","changed_claim_ids":["EVI-INST-0017"],"new_state":"Stable NOT_ESTABLISHED jurisdiction record","previous_state":"No claim-level jurisdiction record","public_explanation":"A public-use page does not invent a controlling jurisdiction.","reason":"Prevent Terms presentation from being treated as proof of governing jurisdiction.","release":"2.0.0-rc.57-WIP","review_boundary":"Public package only","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-009","change_type":"MARK_STALE","changed_claim_ids":["EVI-INST-0018"],"new_state":"Older public release state partially observed; convergence still not established","previous_state":"Actual-host convergence not observed","public_explanation":"RC57 remains WIP because the actual host did not establish deployment of RC56 or RC57.","reason":"Bounded public retrieval showed older release markers than the source package.","release":"2.0.0-rc.57-WIP","review_boundary":"Read-only public content retrieval; no raw headers or server-owned identity","source_record":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-010","change_type":"ADD","changed_claim_ids":["EVI-INST-0019"],"new_state":"UNAVAILABLE actual-host header record","previous_state":"Host headers not separately indexed","public_explanation":"Final response headers require a later authorized host observation.","reason":"Expose unavailable actual-host header evidence instead of substituting source configuration.","release":"2.0.0-rc.57-WIP","review_boundary":"Build environment and public retrieval channel","source_record":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-011","change_type":"ADD","changed_claim_ids":["EVI-INST-0020"],"new_state":"UNAVAILABLE actual-host storage record","previous_state":"Host storage behavior not separately indexed","public_explanation":"Repository behavior and deployed browser behavior remain separate claims.","reason":"Expose unavailable actual-host cookie and storage evidence.","release":"2.0.0-rc.57-WIP","review_boundary":"No interactive live browser capture","source_record":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-012","change_type":"ADD","changed_claim_ids":["EVI-INST-0021"],"new_state":"UNAVAILABLE submission-behavior record","previous_state":"No scoped actual-host submission record","public_explanation":"Visible fields are not proof of successful storage or review.","reason":"Record that the live contact form was not submitted during validation.","release":"2.0.0-rc.57-WIP","review_boundary":"Read-only public observation","source_record":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-013","change_type":"ADD","changed_claim_ids":["EVI-INST-0022"],"new_state":"Stable NOT_ESTABLISHED external-validation record","previous_state":"External validation boundary spread across page prose","public_explanation":"Internal release evidence is not independent validation.","reason":"Make independent-validation absence explicit.","release":"2.0.0-rc.57-WIP","review_boundary":"Public package only","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-014","change_type":"ADD","changed_claim_ids":["EVI-INST-0023"],"new_state":"Server-rendered ledger with optional client filtering","previous_state":"No public ledger","public_explanation":"Visitors can inspect claim records even when client scripts are unavailable.","reason":"Preserve no-JavaScript access to core ledger content.","release":"2.0.0-rc.57-WIP","review_boundary":"Packaged template behavior","source_record":"app/templates/institutional/evidence.html","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-015","change_type":"ADD","changed_claim_ids":["EVI-INST-0024"],"new_state":"Claim-level classes, statuses, limitations, and change history","previous_state":"Claim classification existed only as page-level doctrine","public_explanation":"The ledger cannot promote a target, source record, or interface statement into certification or authority.","reason":"Define the public ledger as an evidence index rather than a compliance register.","release":"2.0.0-rc.57-WIP","review_boundary":"Public evidence interpretation","source_record":"app/templates/institutional/evidence.html","supersedes_event_id":null},{"change_event_id":"EV-CHG-0057-016","change_type":"ADD","changed_claim_ids":["EVI-INST-0025"],"new_state":"Stable claim record for the retrieved public accessibility statement","previous_state":"Public accessibility text was included only in the aggregate host-observation record","public_explanation":"The observed page statement is indexed as public documentation while its limits and stale release marker remain visible.","reason":"Record a bounded public first-party statement separately from repository and actual-host runtime claims.","release":"2.0.0-rc.57-WIP","review_boundary":"Retrieved public representation only; no certification, header, origin-byte, or deployment-convergence inference","source_record":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","supersedes_event_id":null}],"change_types":["ADD","CLARIFY","CORRECT","QUALIFY","WITHDRAW","SUPERSEDE","RESTORE","MARK_STALE"],"claim_classes":["REPOSITORY_VERIFIABLE","PUBLICLY_DOCUMENTED_AND_VERIFIED","DECLARED_INSTITUTIONAL_PRINCIPLE","OPERATIONAL_TARGET","ACTUAL_HOST_OBSERVATION","EXTERNAL_VALIDATION","UNKNOWN_NOT_ESTABLISHED"],"filters":{},"generated_at":"2026-08-13T00:47:38Z","ledger_digest_sha256":"706b921ad00d78b09b37114006a1de053c4624ea12ec75ac980e8cab06a6f0aa","public_url":"https://evulgare.com/institutional/evidence/","records":[{"change_event_id":"EV-CHG-0057-001","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0001","claim_text":"The packaged source defines a canonical /institutional/ route and repository-owned directory template.","claim_title":"Canonical Institutional directory exists in the package","institutional_page":"institutional","known_defeaters":["Route removal, blueprint registration failure, mixed deployment, or stale host release."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish that the route is deployed or reachable on the current public host."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0001/","scope":"The identified source release only","source_digest":"1cc285039e261460c4249372bf2f152416bbe4bf8c9a3995252db9543750bd0a","source_path_or_public_url":"app/blueprints/main/routes.py","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Static route and template inspection","verification_result":"Route declaration and template reference present"},{"change_event_id":"EV-CHG-0056-001","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0002","claim_text":"The packaged Company page explains Evulgare work, evidence boundaries, and artifact-state distinctions in a versioned Jinja template.","claim_title":"Company page is repository-owned institutional content","institutional_page":"company","known_defeaters":["A different deployed template, stale cache, or route fallback could present other content."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish legal entity type, registration, ownership, staffing, deployment, or external adoption."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0002/","scope":"Packaged Company template and its supplied route context","source_digest":"e669d451ef8ddef0e887525a28e05c26185b36ed7f2b723587a00e87d5451519","source_path_or_public_url":"app/templates/company/index.html","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Template content inspection and dependency-light rendering","verification_result":"Company institutional sections present"},{"change_event_id":"EV-CHG-0056-002","claim_class":"DECLARED_INSTITUTIONAL_PRINCIPLE","claim_id":"EVI-INST-0003","claim_text":"The Principles page publishes Evulgare design positions; they are not represented as universal law, scientific fact, or external institutional consensus.","claim_title":"Institutional principles are declared design positions","institutional_page":"principles","known_defeaters":["A later release may clarify, supersede, withdraw, or replace a principle."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["A declared principle does not prove implementation in every route or external acceptance."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0003/","scope":"Evulgare design doctrine for the identified release","source_digest":"78e755993c429e96d44feb05d603d97b22774c1e432dc1fe231e7f9b342322a1","source_path_or_public_url":"app/institutional_content.py","source_release":"2.0.0-rc.57-WIP","source_type":"DECLARED_POLICY","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Inspection of the principles registry and rendered page","verification_result":"Twelve bounded principles with explicit non-meanings are present"},{"change_event_id":"EV-CHG-0056-003","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0004","claim_text":"The repository defines one public contact route with name, work email, organization, topic, and message fields plus CSRF and honeypot boundaries.","claim_title":"One public contact form is implemented","institutional_page":"contact","known_defeaters":["Unavailable database, invalid CSRF token, deployment drift, or operator configuration can prevent submission."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["No response-time commitment, staffed department, public email address, telephone number, or street address is established.","A successful production submission requires live database and CSRF configuration."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0004/","scope":"Packaged application behavior when required Flask, database, and secret configuration are available","source_digest":"e2e51479cf0ca48f258b4c88dddab0bd3de9c2c3c1c54b70f057cef2bb5d50e4","source_path_or_public_url":"app/blueprints/contact/routes.py","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Route, form, model, and template inspection","verification_result":"Public contact-form implementation present"},{"change_event_id":"EV-CHG-0057-002","claim_class":"UNKNOWN_NOT_ESTABLISHED","claim_id":"EVI-INST-0005","claim_text":"The repository does not establish a public support or security response-time service level.","claim_title":"Contact response time is not established","institutional_page":"contact","known_defeaters":["A later attributable public policy or contract could establish a scoped response commitment."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Absence from reviewed sources does not prove that no private operational target exists."],"observation_environment":"Repository and public-page review","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0005/","scope":"Public Evulgare Institutional pages and packaged records reviewed for RC57","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Truth audit for response-time and staffing claims","verification_result":"No verified response-time commitment found"},{"change_event_id":"EV-CHG-0056-004","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0006","claim_text":"The packaged public templates and first-party scripts do not reference Google Analytics, Meta Pixel, session-replay, or advertising trackers in the audited source scope.","claim_title":"Third-party public analytics are absent from the packaged runtime references","institutional_page":"privacy","known_defeaters":["A deployment layer, later source change, or externally injected script could change runtime behavior."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish hosting-provider behavior, injected proxy content, browser extensions, DNS services, or an unobserved deployed release."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0006/","scope":"Packaged repository-owned templates and browser assets","source_digest":"1ffa2644407947870c45ff801dcb326b17c7d17c42bdc1082e3847be7c26c81e","source_path_or_public_url":"app/templates/base.html","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Static first-party template and script reference audit","verification_result":"No named third-party analytics or advertising runtime reference found"},{"change_event_id":"EV-CHG-0056-005","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0007","claim_text":"The repository stores information a visitor voluntarily submits through the contact form; this is a different processing event from ordinary public-page browsing.","claim_title":"Contact submissions are distinct from passive browsing","institutional_page":"privacy","known_defeaters":["Production configuration or a different deployed version can change storage behavior."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Actual production database contents, access, backup, deletion, and infrastructure logs were not observed."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0007/","scope":"Packaged data model and route behavior","source_digest":"5ef02293bd2c414b8cb64b7bfcc214b4a446118324b942ced2d030cdfccb735a","source_path_or_public_url":"app/models.py","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Contact model and route inspection","verification_result":"ContactSubmission fields and write path present"},{"change_event_id":"EV-CHG-0057-003","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0008","claim_text":"The packaged configuration defines a 365-day contact-retention default that can be changed by environment configuration; the active production value and enforcement state are not established here.","claim_title":"Repository retention default is not a verified production retention period","institutional_page":"privacy","known_defeaters":["Environment override, operational failure, migration state, or retention exception."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish the live environment value, deletion job operation, backups, legal holds, or historic records."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0008/","scope":"Repository default only","source_digest":"a20b7528188a3ab713ec595b9af9c2c850e0051f67a790e7afd5047fc71e6c41","source_path_or_public_url":"app/config.py","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Configuration-source inspection","verification_result":"Environment-overridable default found"},{"change_event_id":"EV-CHG-0056-006","claim_class":"OPERATIONAL_TARGET","claim_id":"EVI-INST-0009","claim_text":"Evulgare declares WCAG 2.2 Level AA as an accessibility target for public interfaces.","claim_title":"Public interfaces target WCAG 2.2 Level AA","institutional_page":"accessibility","known_defeaters":["Known barriers, untested assistive technologies, regressions, third-party or host changes, and complex visualization limits."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Representative automated and browser checks do not establish full conformance or certification."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0009/","scope":"Declared public-interface target","source_digest":"e381e35f68e9ec05ba9e5d9ff5ba0bd04c1a21f34205c94500cf4bea2f4e5194","source_path_or_public_url":"app/templates/institutional/accessibility.html","source_release":"2.0.0-rc.57-WIP","source_type":"DECLARED_POLICY","status":"TARGET_NOT_COMPLETED","superseded_by":[],"supersedes":[],"verification_method":"Accessibility-page statement inspection","verification_result":"Target language present and certification language excluded"},{"change_event_id":"EV-CHG-0057-004","claim_class":"UNKNOWN_NOT_ESTABLISHED","claim_id":"EVI-INST-0010","claim_text":"No independent accessibility certification or complete WCAG conformance determination is represented by the repository evidence.","claim_title":"Accessibility certification is not established","institutional_page":"accessibility","known_defeaters":["A future independent assessment with exact scope, date, methodology, and issuer could supersede this state."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["This record does not evaluate every private assessment that may exist outside the package."],"observation_environment":"Repository and acceptance-evidence review","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0010/","scope":"Public packaged records reviewed for RC57","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Truth audit for certification language","verification_result":"No certification record found"},{"change_event_id":"EV-CHG-0056-007","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0011","claim_text":"The packaged contact form and application stack include CSRF protection when the Flask application is running with required configuration.","claim_title":"Browser forms use a CSRF boundary in source","institutional_page":"security","known_defeaters":["Misconfiguration, disabled extension, mixed deployment, or route bypass."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish the value, rotation, transport, or enforcement of secrets on the actual host."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0011/","scope":"Packaged application source","source_digest":"a29d2d47aee0e53ffae02b821dbfcd1af83b8bfa0c90fa59e58293c251a01635","source_path_or_public_url":"app/forms.py","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Form and extension configuration inspection","verification_result":"CSRF-enabled form path present"},{"change_event_id":"EV-CHG-0056-008","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0012","claim_text":"The packaged application defines security-header behavior, but reverse proxies and host configuration can alter the final public response.","claim_title":"Restrictive response-header logic exists in source","institutional_page":"security","known_defeaters":["Proxy rewriting, stale release, route fallback, configuration drift, or middleware registration failure."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Final actual-host headers were unavailable in the build environment."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0012/","scope":"Application-generated responses in the packaged source","source_digest":"ab2f62c3f3bcc9fb3c1fecb8af080a960fb2437d76f4baf1cd747b4f4287bc7d","source_path_or_public_url":"app/security.py","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Security middleware inspection","verification_result":"Header construction and response hook present"},{"change_event_id":"EV-CHG-0057-005","claim_class":"UNKNOWN_NOT_ESTABLISHED","claim_id":"EVI-INST-0013","claim_text":"The public repository does not establish SOC 2, ISO 27001, FedRAMP, penetration-test, bug-bounty, or equivalent security-program status.","claim_title":"Security certification and penetration-test results are not established","institutional_page":"security","known_defeaters":["A future public report from an identified assessor with exact scope and date could supersede this state."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Unknown does not mean absent outside the reviewed public package."],"observation_environment":"Repository and public-page review","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0013/","scope":"Public packaged material reviewed for RC57","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Truth audit for security-program claims","verification_result":"No attributable certification or audit record found"},{"change_event_id":"EV-CHG-0056-009","claim_class":"DECLARED_INSTITUTIONAL_PRINCIPLE","claim_id":"EVI-INST-0014","claim_text":"Evulgare states that hashes, references, tests, demonstrations, and interface presentation prove only what their named evidence and scope establish.","claim_title":"No false evidentiary inference is a declared public-use rule","institutional_page":"terms","known_defeaters":["A later version may clarify or supersede wording while preserving lineage."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["This design rule is not enacted law and does not control external adjudication."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0014/","scope":"Interpretation of Evulgare public materials","source_digest":"74887894b686e753bb9b13b348b05290ab434e7676c692a837f2b6f3db740335","source_path_or_public_url":"app/templates/institutional/terms.html","source_release":"2.0.0-rc.57-WIP","source_type":"DECLARED_POLICY","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Terms-page content inspection","verification_result":"Bounded inference rules present"},{"change_event_id":"EV-CHG-0057-006","claim_class":"UNKNOWN_NOT_ESTABLISHED","claim_id":"EVI-INST-0015","claim_text":"The repository does not establish a legal entity type, registration identifier, incorporation record, or nonprofit status for Evulgare.","claim_title":"Evulgare legal entity status is not established by the package","institutional_page":"company","known_defeaters":["An attributable registration record or explicit organizational artifact could establish a bounded fact."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Absence from the package does not prove that no external registration exists."],"observation_environment":"Institutional truth audit","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0015/","scope":"RC57 public package","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Search for legal-entity and registration evidence","verification_result":"No controlling public record present in the package"},{"change_event_id":"EV-CHG-0057-007","claim_class":"UNKNOWN_NOT_ESTABLISHED","claim_id":"EVI-INST-0016","claim_text":"The package does not identify verified owners, officers, directors, employee counts, staffed departments, or named support personnel.","claim_title":"Ownership, officers, and staffing are not established","institutional_page":"company","known_defeaters":["A later attributable public organizational record could establish a scoped fact."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Unknown does not mean no people or roles exist outside the public package."],"observation_environment":"Institutional truth audit","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0016/","scope":"RC57 public package","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Search for ownership, officer, staffing, and department claims","verification_result":"No verified public record present"},{"change_event_id":"EV-CHG-0057-008","claim_class":"UNKNOWN_NOT_ESTABLISHED","claim_id":"EVI-INST-0017","claim_text":"The package does not establish a controlling corporate, contractual, or regulatory jurisdiction for Evulgare public Institutional pages.","claim_title":"Governing jurisdiction is not established","institutional_page":"terms","known_defeaters":["A future public legal instrument with exact applicability could supersede this state."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Specific transactions or external relationships may have separate terms not represented here."],"observation_environment":"Institutional truth audit","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0017/","scope":"RC57 public package","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Search for governing-law and jurisdiction evidence","verification_result":"No verified governing-jurisdiction record present"},{"change_event_id":"EV-CHG-0057-009","claim_class":"ACTUAL_HOST_OBSERVATION","claim_id":"EVI-INST-0018","claim_text":"Public retrieval on 2026-08-13 showed RC55 footer markers on multiple Institutional routes while the source package was RC56; deployment convergence to RC56 or RC57 was not established.","claim_title":"Actual host exposed older release markers during bounded public retrieval","institutional_page":"institutional","known_defeaters":["Search or retrieval cache staleness, later deployment, edge inconsistency, or content without a reliable release marker."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Raw HTTP status, redirects, headers, cookies, storage, request waterfall, server process identity, and independent cache nodes were not observed."],"observation_environment":"Public unauthenticated web retrieval","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0018/","scope":"Retrieved Company, Contact, Privacy, Accessibility, Security, and Terms content only","source_digest":"f181b06cd826007f4dc94bc341c783d1dee23c31f139816f2de44ce5b82484ef","source_path_or_public_url":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","source_release":"2.0.0-rc.56-WIP","source_type":"ACTUAL_HOST_OBSERVATION_RECORD","status":"STALE_REVIEW_REQUIRED","superseded_by":[],"supersedes":[],"verification_method":"Public page-content retrieval without form submission or state change","verification_result":"Older release markers observed; server-owned runtime identity unavailable"},{"change_event_id":"EV-CHG-0057-010","claim_class":"ACTUAL_HOST_OBSERVATION","claim_id":"EVI-INST-0019","claim_text":"The build environment could not collect final public response headers or content-security-policy values from the actual host.","claim_title":"Actual-host response headers remain unavailable","institutional_page":"security","known_defeaters":["A later authorized HTTP probe or server-owned evidence route could establish final values."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Source header logic remains separately inspectable but is not a substitute for final public responses."],"observation_environment":"Build container and public web retrieval","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0019/","scope":"Actual-host header evidence for Institutional routes","source_digest":"f181b06cd826007f4dc94bc341c783d1dee23c31f139816f2de44ce5b82484ef","source_path_or_public_url":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","source_release":"2.0.0-rc.56-WIP","source_type":"ACTUAL_HOST_OBSERVATION_RECORD","status":"UNAVAILABLE","superseded_by":[],"supersedes":[],"verification_method":"Attempted unauthenticated host observation","verification_result":"Build-container DNS unavailable; web retrieval did not expose raw headers"},{"change_event_id":"EV-CHG-0057-011","claim_class":"ACTUAL_HOST_OBSERVATION","claim_id":"EVI-INST-0020","claim_text":"No verified record of cookies, cookie attributes, or browser-storage keys created by ordinary interactions on the actual host was produced in this environment.","claim_title":"Actual-host cookies and browser storage remain unavailable","institutional_page":"privacy","known_defeaters":["A later representative browser capture with consent-safe interactions could establish scoped behavior."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Repository-declared cookie and storage behavior is recorded separately and may differ from deployed behavior."],"observation_environment":"Public web retrieval without interactive browser session","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0020/","scope":"Actual-host ordinary public interactions","source_digest":"f181b06cd826007f4dc94bc341c783d1dee23c31f139816f2de44ce5b82484ef","source_path_or_public_url":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","source_release":"2.0.0-rc.56-WIP","source_type":"ACTUAL_HOST_OBSERVATION_RECORD","status":"UNAVAILABLE","superseded_by":[],"supersedes":[],"verification_method":"Review of available actual-host observation channels","verification_result":"Interactive storage observation unavailable"},{"change_event_id":"EV-CHG-0057-012","claim_class":"ACTUAL_HOST_OBSERVATION","claim_id":"EVI-INST-0021","claim_text":"The public contact form was visible, but no message was submitted and no database, CSRF, validation, redirect, or retention behavior was tested on the actual host.","claim_title":"Actual-host contact submission behavior remains unavailable","institutional_page":"contact","known_defeaters":["A later authorized synthetic submission with server-owned evidence could establish bounded behavior."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish successful storage, review, deletion, response, or service availability."],"observation_environment":"Public unauthenticated page retrieval","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0021/","scope":"Contact route presentation only","source_digest":"f181b06cd826007f4dc94bc341c783d1dee23c31f139816f2de44ce5b82484ef","source_path_or_public_url":"docs/ACTUAL_HOST_INSTITUTIONAL_EVIDENCE_RC57.json","source_release":"2.0.0-rc.56-WIP","source_type":"ACTUAL_HOST_OBSERVATION_RECORD","status":"UNAVAILABLE","superseded_by":[],"supersedes":[],"verification_method":"Read-only form inspection","verification_result":"Visible fields observed; submission intentionally not performed"},{"change_event_id":"EV-CHG-0057-013","claim_class":"EXTERNAL_VALIDATION","claim_id":"EVI-INST-0022","claim_text":"No independent external validation record for the complete Institutional page set is included in the package.","claim_title":"External validation is not established for Institutional pages","institutional_page":"institutional","known_defeaters":["A future third-party record with issuer, method, date, scope, and limitations could supersede this state."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Internal automated and representative-browser checks remain useful but are not independent validation."],"observation_environment":"RC57 package review","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0022/","scope":"Institutional page content, accessibility, privacy, security, and legal interpretation","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Search for independent validation evidence","verification_result":"No attributable external validation artifact found"},{"change_event_id":"EV-CHG-0057-014","claim_class":"REPOSITORY_VERIFIABLE","claim_id":"EVI-INST-0023","claim_text":"The Institutional templates render their explanations, claim records, links, and boundaries server-side; JavaScript only enhances filtering and navigation.","claim_title":"Core Institutional content remains usable without JavaScript in the package","institutional_page":"institutional","known_defeaters":["Template regression, route failure, missing context, or deployment drift."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish every actual-host failure mode or assistive-technology behavior."],"observation_environment":"RC57 source tree and dependency-light template rendering","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0023/","scope":"Packaged Institutional templates","source_digest":"ce457354c34de7e07ea4a157ad9141aa381ff6ec885797b4f8c9e6d55e42895e","source_path_or_public_url":"app/templates/institutional/evidence.html","source_release":"2.0.0-rc.57-WIP","source_type":"REPOSITORY_SOURCE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"No-JavaScript render inspection","verification_result":"Core ledger records and links present in server-rendered HTML"},{"change_event_id":"EV-CHG-0057-015","claim_class":"DECLARED_INSTITUTIONAL_PRINCIPLE","claim_id":"EVI-INST-0024","claim_text":"Ledger records classify the current support state and limitations of public claims; they do not certify compliance, legality, safety, or operational readiness.","claim_title":"The public evidence ledger is an evidence index, not a compliance register","institutional_page":"institutional","known_defeaters":["A material wording change must be recorded through append-oriented change governance."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["External decision-makers remain responsible for their own evidence and authority requirements."],"observation_environment":"RC57 source tree","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0024/","scope":"Interpretation of the public Institutional Evidence Ledger","source_digest":"ce457354c34de7e07ea4a157ad9141aa381ff6ec885797b4f8c9e6d55e42895e","source_path_or_public_url":"app/templates/institutional/evidence.html","source_release":"2.0.0-rc.57-WIP","source_type":"DECLARED_POLICY","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Ledger boundary inspection","verification_result":"Non-certification and non-promotion language present"},{"change_event_id":"EV-CHG-0057-016","claim_class":"PUBLICLY_DOCUMENTED_AND_VERIFIED","claim_id":"EVI-INST-0025","claim_text":"A public retrieval of https://evulgare.com/accessibility returned an Accessibility page stating that Evulgare targets WCAG 2.2 AA and displayed an RC55 release marker at the time of observation.","claim_title":"The public Accessibility statement was retrievable during the bounded host observation","institutional_page":"accessibility","known_defeaters":["A later attributable host observation, canonical response capture, or deployed release evidence may supersede this record."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Does not establish current server headers, every cache layer, complete WCAG conformance, certification, or deployment of RC56/RC57.","Search and retrieval systems can expose cached or normalized content rather than an origin-server byte stream."],"observation_environment":"Public first-party page retrieval through the web observation service","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0025/","scope":"The retrieved public representation at the named URL and observation time only","source_digest":null,"source_path_or_public_url":"https://evulgare.com/accessibility","source_release":"ACTUAL_HOST_OBSERVATION_2026-08-13","source_type":"PUBLIC_FIRST_PARTY_PAGE","status":"SUPPORTED_WITHIN_SCOPE","superseded_by":[],"supersedes":[],"verification_method":"Bounded public retrieval and text inspection","verification_result":"Accessibility target statement and RC55 footer marker were present in the retrieved representation"}],"release":"2.0.0-rc.57-WIP","schema":"evulgare.institutional-evidence-ledger.v1","source_release":"2.0.0-rc.56-WIP","source_types":["REPOSITORY_SOURCE","PACKAGED_EVIDENCE","PUBLIC_FIRST_PARTY_PAGE","ACTUAL_HOST_OBSERVATION_RECORD","DECLARED_POLICY","NO_CURRENT_SOURCE","EXTERNAL_EVIDENCE"],"statuses":["SUPPORTED_WITHIN_SCOPE","TARGET_NOT_COMPLETED","NOT_ESTABLISHED","STALE_REVIEW_REQUIRED","SUPERSEDED","WITHDRAWN","CONTRADICTED","UNAVAILABLE"],"summary":{"change_event_count":25,"claim_classes":{"ACTUAL_HOST_OBSERVATION":4,"DECLARED_INSTITUTIONAL_PRINCIPLE":3,"EXTERNAL_VALIDATION":1,"OPERATIONAL_TARGET":1,"PUBLICLY_DOCUMENTED_AND_VERIFIED":1,"REPOSITORY_VERIFIABLE":9,"UNKNOWN_NOT_ESTABLISHED":6},"institutional_pages":{"accessibility":3,"company":3,"contact":3,"institutional":5,"principles":1,"privacy":4,"security":4,"terms":2},"record_count":25,"source_types":{"ACTUAL_HOST_OBSERVATION_RECORD":4,"DECLARED_POLICY":4,"EXTERNAL_EVIDENCE":0,"NO_CURRENT_SOURCE":7,"PACKAGED_EVIDENCE":0,"PUBLIC_FIRST_PARTY_PAGE":1,"REPOSITORY_SOURCE":9},"statuses":{"CONTRADICTED":0,"NOT_ESTABLISHED":7,"STALE_REVIEW_REQUIRED":1,"SUPERSEDED":0,"SUPPORTED_WITHIN_SCOPE":13,"TARGET_NOT_COMPLETED":1,"UNAVAILABLE":3,"WITHDRAWN":0}},"truth_boundary":"A ledger record identifies support state, source, scope, limitations, and change lineage. It is not a certification, compliance finding, legal determination, deployment proof, or factual guarantee."}