{"change_history":[{"change_event_id":"EV-CHG-0057-005","change_type":"ADD","changed_claim_ids":["EVI-INST-0013"],"new_state":"Stable NOT_ESTABLISHED claim record","previous_state":"Security boundary stated in page prose","public_explanation":"The ledger distinguishes no public evidence from proof of absence.","reason":"Record absent security-program evidence without asserting nonexistence.","release":"2.0.0-rc.57-WIP","review_boundary":"Public package only","source_record":"docs/INSTITUTIONAL_EVIDENCE_LEDGER_TRUTH_AUDIT_RC57.json","supersedes_event_id":null}],"record":{"change_event_id":"EV-CHG-0057-005","claim_class":"UNKNOWN_NOT_ESTABLISHED","claim_id":"EVI-INST-0013","claim_text":"The public repository does not establish SOC 2, ISO 27001, FedRAMP, penetration-test, bug-bounty, or equivalent security-program status.","claim_title":"Security certification and penetration-test results are not established","institutional_page":"security","known_defeaters":["A future public report from an identified assessor with exact scope and date could supersede this state."],"last_reviewed":"2026-08-13T00:47:38Z","limitations":["Unknown does not mean absent outside the reviewed public package."],"observation_environment":"Repository and public-page review","observation_time":"2026-08-13T00:47:38Z","public_record_url":"https://evulgare.com/institutional/evidence/EVI-INST-0013/","scope":"Public packaged material reviewed for RC57","source_digest":null,"source_path_or_public_url":"NO_CURRENT_SOURCE","source_release":"2.0.0-rc.57-WIP","source_type":"NO_CURRENT_SOURCE","status":"NOT_ESTABLISHED","superseded_by":[],"supersedes":[],"verification_method":"Truth audit for security-program claims","verification_result":"No attributable certification or audit record found"},"schema":"evulgare.institutional-evidence-record.v1","truth_boundary":"Record integrity and source identity do not establish factual truth beyond the declared scope."}