# TEACH Acceptance and Test Ledger

**Build ID:** `NAIO-NEID-TEACH-FUNCTIONAL-BUILD-KIT-1.0.0`  
**Route / home:** `/nurse-educators-designers/dashboard` / `My TEACH Command Studio`  
**Truth state:** specification and execution ledger; no test below has been executed against the future target application.

## Readiness rule

`Attempted`, `Partial`, `Unknown`, `Unavailable`, `Awaiting review`, `Blocked`, and source-document QA are never `Passed`. Operational status requires all applicable 433 records to pass for the exact built package, with zero critical blocker and real evidence. This distributed kit begins `not_operational_build_required`.

## Inventory

| Inventory | Count | Initial result |
|---|---:|---|
| Build-layer controls | **216** | Not Run |
| Cross-cutting scenarios | **48** | Not Run |
| Build-layer target subtotal | **264** | Not Run |
| Canonical source checks | **169** | Not Run |
| **Total** | **433** | **Not Run** |

## Build-layer controls

| Test ID | Area | Priority | Verification target | Required evidence | Result |
|---|---|---|---|---|---|
| CTL-APP-001 | Launcher | Required | macOS packaged launch: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for APP-001 | Not Run |
| CTL-APP-002 | Launcher | Required | Windows packaged launch: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for APP-002 | Not Run |
| CTL-APP-003 | Launcher | Required | Linux packaged launch: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for APP-003 | Not Run |
| CTL-APP-004 | Launcher | Critical | loopback-only binding: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for APP-004 | Not Run |
| CTL-APP-005 | Launcher | Required | single-writer instance lock: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for APP-005 | Not Run |
| CTL-APP-006 | Launcher | Required | cross-surface version consistency: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for APP-006 | Not Run |
| CTL-AUTH-001 | Authentication | Critical | user-chosen local credential with no default password: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-001 | Not Run |
| CTL-AUTH-002 | Authentication | Critical | authenticated opaque session: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-002 | Not Run |
| CTL-AUTH-003 | Authentication | Critical | session rotation idle expiry and absolute expiry: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-003 | Not Run |
| CTL-AUTH-004 | Authentication | Critical | CSRF Origin and Host enforcement: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-004 | Not Run |
| CTL-AUTH-005 | Authentication | Critical | sign-out current/all session revocation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-005 | Not Run |
| CTL-AUTH-006 | Authentication | Critical | server-only secret boundary: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-006 | Not Run |
| CTL-AUTH-007 | Authentication | Critical | endpoint rate and size limits: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-007 | Not Run |
| CTL-AUTH-008 | Authentication | Critical | secure headers cookies and browser boundary: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUTH-008 | Not Run |
| CTL-ONB-001 | First run | Required | substantial-install and no-background warning: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-001 | Not Run |
| CTL-ONB-002 | First run | Required | safety and accountability acknowledgment: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-002 | Not Run |
| CTL-ONB-003 | First run | Required | explicit canonical role-adapter selection: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-003 | Not Run |
| CTL-ONB-004 | First run | Required | active task-hat and institution selection: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-004 | Not Run |
| CTL-ONB-005 | First run | Required | Private Educator/Designer default and deployment-context choice: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-005 | Not Run |
| CTL-ONB-006 | First run | Required | strict validation against distinct NEID Discover and NEID Soul adapter schemas with unknown-field, incompatible-shape and raw-answer rejection: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-006 | Not Run |
| CTL-ONB-007 | First run | Required | field-level Mission Profile review remains non-authoritative and always requires a separate authenticated institutional runtime bind: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-007 | Not Run |
| CTL-ONB-008 | First run | Required | idempotent starter seed and resumable completion: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ONB-008 | Not Run |
| CTL-CTX-001 | Role and context | Critical | private-store selection: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-001 | Not Run |
| CTL-CTX-002 | Role and context | Critical | separately approved institution-approved-education provisioning: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-002 | Not Run |
| CTL-CTX-003 | Role and context | Critical | persistent owner-role-hat-institution-context-authority bar: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-003 | Not Run |
| CTL-CTX-004 | Role and context | Critical | cache-clearing context switch with nonce rotation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-004 | Not Run |
| CTL-CTX-005 | Role and context | Critical | cross-institution isolation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-005 | Not Run |
| CTL-CTX-006 | Role and context | Critical | cross-course-or-project isolation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-006 | Not Run |
| CTL-CTX-007 | Role and context | Critical | private-to-institution transfer prohibition: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-007 | Not Run |
| CTL-CTX-008 | Role and context | Critical | institution-to-private transfer prohibition: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-008 | Not Run |
| CTL-CTX-009 | Role and context | Critical | server-side exact-one active workspace/role/institution-course-project/operational-context bind with bidirectional private-versus-institutional deployment consistency: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-009 | Not Run |
| CTL-CTX-010 | Role and context | Critical | material-change approval invalidation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-010 | Not Run |
| CTL-CTX-011 | Role and context | Critical | three-adapter least-privilege authority ceiling: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-011 | Not Run |
| CTL-CTX-012 | Role and context | Critical | single-store search backup and export: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CTX-012 | Not Run |
| CTL-HOME-001 | Command Center | Required | exact canonical Core Four launchers: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-001 | Not Run |
| CTL-HOME-002 | Command Center | Required | deliberately empty optional fifth slot: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-002 | Not Run |
| CTL-HOME-003 | Command Center | Required | Top Three and maximum-seven attention queue: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-003 | Not Run |
| CTL-HOME-004 | Command Center | Required | Start a Mission: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-004 | Not Run |
| CTL-HOME-005 | Command Center | Required | persistent privacy/data/authority banner: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-005 | Not Run |
| CTL-HOME-006 | Command Center | Required | all permanent safety and recovery controls: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-006 | Not Run |
| CTL-HOME-007 | Command Center | Required | truthful repository-backed summary cards: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-007 | Not Run |
| CTL-HOME-008 | Command Center | Required | usable Markdown/manual degraded view: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for HOME-008 | Not Run |
| CTL-MISSION-001 | Missions | Required | mission CRUD: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-001 | Not Run |
| CTL-MISSION-002 | Missions | Required | repeatable Assess–Diagnose/Define–Plan–Implement–Evaluate loop: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-002 | Not Run |
| CTL-MISSION-003 | Missions | Required | Assess fact-source-assumption-unknown separation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-003 | Not Run |
| CTL-MISSION-004 | Missions | Required | Define without learner diagnosis or person inference or blame: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-004 | Not Run |
| CTL-MISSION-005 | Missions | Required | Plan option-benefit-burden-authority comparison: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-005 | Not Run |
| CTL-MISSION-006 | Missions | Required | Implement local-draft and human-handoff ceiling: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-006 | Not Run |
| CTL-MISSION-007 | Missions | Required | Evaluate null adverse partial and intended results: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-007 | Not Run |
| CTL-MISSION-008 | Missions | Required | branch and reopen with lineage: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-008 | Not Run |
| CTL-MISSION-009 | Missions | Required | upstream-change downstream invalidation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-009 | Not Run |
| CTL-MISSION-010 | Missions | Required | task milestone dependency and measure CRUD: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-010 | Not Run |
| CTL-MISSION-011 | Missions | Required | exact eight-stage artifact lifecycle with human-scope Approved Plan, external-only Authorized Execution and verified-reference Completed Action: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-011 | Not Run |
| CTL-MISSION-012 | Missions | Required | scoped history search archive restore and deletion: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MISSION-012 | Not Run |
| CTL-LIFE-001 | Life and practice | Required | private Daily Educator/Designer Brief with no learner, patient or institution payload: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-001 | Not Run |
| CTL-LIFE-002 | Life and practice | Required | coarse Teaching-Day Reset with no reconstructable person, submission, event or rare-combination narrative: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-002 | Not Run |
| CTL-LIFE-003 | Life and practice | Required | workload, capacity, preparation-time and buffer budget: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-003 | Not Run |
| CTL-LIFE-004 | Life and practice | Required | NURSE Compass and three-or-fewer 90-day results: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-004 | Not Run |
| CTL-LIFE-005 | Life and practice | Required | Minimum Mode and Re-entry Plan: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-005 | Not Run |
| CTL-LIFE-006 | Life and practice | Required | extra role, committee, course or service commitment decision brief without acceptance: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-006 | Not Run |
| CTL-LIFE-007 | Life and practice | Required | public-source-aware professional learning: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-007 | Not Run |
| CTL-LIFE-008 | Life and practice | Required | credential and required-development milestone without certification claim: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-008 | Not Run |
| CTL-LIFE-009 | Life and practice | Required | private reflection excluded from badges, agents and institutional context: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-009 | Not Run |
| CTL-LIFE-010 | Life and practice | Required | human-conversation rehearsal without learner data or send: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-010 | Not Run |
| CTL-LIFE-011 | Life and practice | Required | truthful scholarship, faculty-development, career and portfolio evidence map: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-011 | Not Run |
| CTL-LIFE-012 | Life and practice | Required | private relationships, finances, recovery and life-goal plan with no institutional transfer: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIFE-012 | Not Run |
| CTL-TEACH-001 | Institution-Approved Education | Critical | separate institutional workspace readiness and authenticated runtime bind: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-001 | Not Run |
| CTL-TEACH-002 | Institution-Approved Education | Critical | exact active role, task hat, institution, course or project authority receipt: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-002 | Not Run |
| CTL-TEACH-003 | Institution-Approved Education | Critical | program-evaluation, quality-improvement, research and ethics human determination boundary: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-003 | Not Run |
| CTL-TEACH-004 | Institution-Approved Education | Critical | TEACH-DATA-C non-person course content receipt with version, rights, purpose, approval, expiry and hash: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-004 | Not Run |
| CTL-TEACH-005 | Institution-Approved Education | Critical | TEACH-DATA-A exact aggregate receipt with definition, denominator, missingness, provenance, suppression, approval, expiry and hash: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-005 | Not Run |
| CTL-TEACH-006 | Institution-Approved Education | Critical | TEACH-DATA-R opaque official-system reference with no learner payload or reversible identifier: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-006 | Not Run |
| CTL-TEACH-007 | Institution-Approved Education | Critical | learner record, submission, grade, evaluation, accommodation, conduct and complaint rejection before persistence or AI: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-007 | Not Run |
| CTL-TEACH-008 | Institution-Approved Education | Critical | secure assessment, answer key and item-bank rejection before persistence or AI: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-008 | Not Run |
| CTL-TEACH-009 | Institution-Approved Education | Critical | outcome–activity–assessment alignment with named-human interpretation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-009 | Not Run |
| CTL-TEACH-010 | Institution-Approved Education | Critical | accessibility and assistive-technology human release review: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-010 | Not Run |
| CTL-TEACH-011 | Institution-Approved Education | Critical | authentic synthetic assessment, rubric and feedback design without grading or learner inference: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-011 | Not Run |
| CTL-TEACH-012 | Institution-Approved Education | Critical | academic-integrity and AI-use preparation with AI detector never treated as evidence: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-012 | Not Run |
| CTL-TEACH-013 | Institution-Approved Education | Critical | synthetic clinical, skills-lab and simulation design with no patient data, clinical evaluation or clearance: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-013 | Not Run |
| CTL-TEACH-014 | Institution-Approved Education | Critical | source, version, applicability, rights, license, attribution, correction and expiry control: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-014 | Not Run |
| CTL-TEACH-015 | Institution-Approved Education | Critical | curriculum, competency and accreditation evidence mapping without compliance or accreditation determination: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-015 | Not Run |
| CTL-TEACH-016 | Institution-Approved Education | Critical | aggregate program-evidence sensemaking without causality, validity, fairness or improvement claim: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-016 | Not Run |
| CTL-TEACH-017 | Institution-Approved Education | Critical | protected or paid workload and burden receipt for institutional work: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-017 | Not Run |
| CTL-TEACH-018 | Institution-Approved Education | Critical | external-only LMS, gradebook, communication, course, accreditation, publication and release execution with verified reference: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for TEACH-018 | Not Run |
| CTL-PWR-001 | TEACH Library | Critical | Power 1 — Teaching Identity & Learner Promise Compass: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-001 | Not Run |
| CTL-PWR-002 | TEACH Library | Critical | Power 2 — Backward Design & Alignment Architect: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-002 | Not Run |
| CTL-PWR-003 | TEACH Library | Critical | Power 3 — Evidence-Informed Learning Experience Studio: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-003 | Not Run |
| CTL-PWR-004 | TEACH Library | Critical | Power 4 — Course Journey, Modality & Cognitive-Load Mapper: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-004 | Not Run |
| CTL-PWR-005 | TEACH Library | Critical | Power 5 — Universal Design & Accessibility Co-Designer: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-005 | Not Run |
| CTL-PWR-006 | TEACH Library | Critical | Power 6 — Inclusive Pedagogy, Belonging & Bias Lens: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-006 | Not Run |
| CTL-PWR-007 | TEACH Library | Critical | Power 7 — Active Learning & Engagement Lab: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-007 | Not Run |
| CTL-PWR-008 | TEACH Library | Critical | Power 8 — Learner Voice, Support & Communication Navigator: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-008 | Not Run |
| CTL-PWR-009 | TEACH Library | Critical | Power 9 — Authentic Assessment & Blueprint Architect: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-009 | Not Run |
| CTL-PWR-010 | TEACH Library | Critical | Power 10 — Rubric, Feedback & Calibration Studio: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-010 | Not Run |
| CTL-PWR-011 | TEACH Library | Critical | Power 11 — Academic Integrity & AI-Use Contract Builder: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-011 | Not Run |
| CTL-PWR-012 | TEACH Library | Critical | Power 12 — Learning Evidence & Program-Evaluation Sensemaker: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-012 | Not Run |
| CTL-PWR-013 | TEACH Library | Critical | Power 13 — Clinical, Skills-Lab & Simulation Safety Studio: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-013 | Not Run |
| CTL-PWR-014 | TEACH Library | Critical | Power 14 — Curriculum, Competency & Accreditation Mapper: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-014 | Not Run |
| CTL-PWR-015 | TEACH Library | Critical | Power 15 — Content, Media, Copyright & OER Steward: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-015 | Not Run |
| CTL-PWR-016 | TEACH Library | Critical | Power 16 — Source, Version & Knowledge Integrity Librarian: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-016 | Not Run |
| CTL-PWR-017 | TEACH Library | Critical | Power 17 — AI Literacy & Responsible-Use Academy: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-017 | Not Run |
| CTL-PWR-018 | TEACH Library | Critical | Power 18 — Governed Learning-Technology & Automation Lab: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-018 | Not Run |
| CTL-PWR-019 | TEACH Library | Critical | Power 19 — Faculty/Designer Workload & Capacity Shield: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-019 | Not Run |
| CTL-PWR-020 | TEACH Library | Critical | Power 20 — Scholarship, Portfolio, Career & Leadership Catalyst: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PWR-020 | Not Run |
| CTL-LIB-001 | TEACH Library | Required | exact 20/18/24 catalog identity count order and source hashes: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIB-001 | Not Run |
| CTL-LIB-002 | TEACH Library | Required | eighteen-workflow governed router: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIB-002 | Not Run |
| CTL-LIB-003 | TEACH Library | Required | twenty-four-template required-field and lineage engine: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIB-003 | Not Run |
| CTL-LIB-004 | TEACH Library | Required | Human Work & Quality anti-slop and team-credit review: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for LIB-004 | Not Run |
| CTL-EVID-001 | Evidence and policy | Critical | source CRUD: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-001 | Not Run |
| CTL-EVID-002 | Evidence and policy | Critical | real retrieval with reproducible query: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-002 | Not Run |
| CTL-EVID-003 | Evidence and policy | Critical | exact NEID-SRC-01..10 registry resolution with bundled path/hash verification and no invented identifier, URL, metadata, adoption or authority: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-003 | Not Run |
| CTL-EVID-004 | Evidence and policy | Critical | claim CRUD: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-004 | Not Run |
| CTL-EVID-005 | Evidence and policy | Critical | supports/qualifies/contradicts/context-only claim-source links: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-005 | Not Run |
| CTL-EVID-006 | Evidence and policy | Critical | citation validator: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-006 | Not Run |
| CTL-EVID-007 | Evidence and policy | Critical | freshness correction retraction and supersession propagation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-007 | Not Run |
| CTL-EVID-008 | Evidence and policy | Critical | current local-policy precedence: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-008 | Not Run |
| CTL-EVID-009 | Evidence and policy | Critical | measure provenance and changed-denominator visibility: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-009 | Not Run |
| CTL-EVID-010 | Evidence and policy | Critical | retrieved-content prompt-injection quarantine: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for EVID-010 | Not Run |
| CTL-AI-001 | Hermes and AI | Critical | implemented-backend selection: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-001 | Not Run |
| CTL-AI-002 | Hermes and AI | Critical | recent authenticated health and capability truth: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-002 | Not Run |
| CTL-AI-003 | Hermes and AI | Critical | live model discovery: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-003 | Not Run |
| CTL-AI-004 | Hermes and AI | Critical | context-bound provider session create: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-004 | Not Run |
| CTL-AI-005 | Hermes and AI | Critical | context-bound provider session resume: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-005 | Not Run |
| CTL-AI-006 | Hermes and AI | Critical | server governance before provider call: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-006 | Not Run |
| CTL-AI-007 | Hermes and AI | Critical | genuine ordered provider-originated stream: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-007 | Not Run |
| CTL-AI-008 | Hermes and AI | Critical | Stop propagation with zero later accepted deltas: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-008 | Not Run |
| CTL-AI-009 | Hermes and AI | Critical | idempotent explicit retry: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-009 | Not Run |
| CTL-AI-010 | Hermes and AI | Critical | real tool-event and approval visibility: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AI-010 | Not Run |
| CTL-AGENT-001 | Agent Center | Critical | source-hashed registry with every agent P0 Disabled: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-001 | Not Run |
| CTL-AGENT-002 | Agent Center | Critical | deterministic route preview: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-002 | Not Run |
| CTL-AGENT-003 | Agent Center | Critical | complete context/data/tool/resource charter: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-003 | Not Run |
| CTL-AGENT-004 | Agent Center | Critical | one-use expiring exact-hash authorization: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-004 | Not Run |
| CTL-AGENT-005 | Agent Center | Critical | P1/P2 exact one-run ceilings; P3 only a separately approved deterministic local personal reminder after three supervised successes with no model, course/learner/institution data, connector, external destination, monitoring, learner-monitoring/surveillance input or education or program decision; P4 absent: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-005 | Not Run |
| CTL-AGENT-006 | Agent Center | Critical | visible allowlisted bounded local run: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-006 | Not Run |
| CTL-AGENT-007 | Agent Center | Critical | global Pause All: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-007 | Not Run |
| CTL-AGENT-008 | Agent Center | Critical | selected-run Kill: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-008 | Not Run |
| CTL-AGENT-009 | Agent Center | Critical | observed-state reconciliation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-009 | Not Run |
| CTL-AGENT-010 | Agent Center | Critical | no grading clinical course accreditation message release or official-write authority: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AGENT-010 | Not Run |
| CTL-MEM-001 | Memory | Critical | session-only/off default: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-001 | Not Run |
| CTL-MEM-002 | Memory | Critical | exact Preview and Remember consent: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-002 | Not Run |
| CTL-MEM-003 | Memory | Critical | versioned Edit with renewed consent: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-003 | Not Run |
| CTL-MEM-004 | Memory | Critical | immediate Forget across caches and prompt assembly: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-004 | Not Run |
| CTL-MEM-005 | Memory | Critical | truthful local Delete: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-005 | Not Run |
| CTL-MEM-006 | Memory | Critical | owner-store-context-purpose-expiry retrieval scope: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-006 | Not Run |
| CTL-MEM-007 | Memory | Critical | single-store memory export: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-007 | Not Run |
| CTL-MEM-008 | Memory | Critical | canonical Green/Yellow/Orange/Red memory policy: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for MEM-008 | Not Run |
| CTL-CAP-001 | Capabilities | Required | criteria-versioned inventory with Not assessed default: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-001 | Not Run |
| CTL-CAP-002 | Capabilities | Required | eligible evidence CRUD admits minimized structural process evidence only and excludes private health, disability, family, relationship, financial, capacity, employment and whole-life detail from every badge record: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-002 | Not Run |
| CTL-CAP-003 | Capabilities | Required | synthetic/click/AI-self-score evidence exclusion: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-003 | Not Run |
| CTL-CAP-004 | Capabilities | Required | exact current prerequisite chain L1 none, L2 requires L1, L3 requires L2, and L4 requires L3 plus the global orchestration capstone: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-004 | Not Run |
| CTL-CAP-005 | Capabilities | Required | contextual named-human review overrides criterion defaults for professional, institutional, credential, quality, employment, Yellow, Orange or otherwise consequential badge evidence: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-005 | Not Run |
| CTL-CAP-006 | Capabilities | Required | correction expiry revocation and recomputation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-006 | Not Run |
| CTL-CAP-007 | Capabilities | Required | non-credential/non-authority boundary: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-007 | Not Run |
| CTL-CAP-008 | Capabilities | Required | truthful exact-role team contribution and AI disclosure: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for CAP-008 | Not Run |
| CTL-GOV-001 | Governance | Critical | independent edena_tier and absolute_stop with Personal Red clean-sandbox and Institutional Red blocking rules: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-001 | Not Run |
| CTL-GOV-002 | Governance | Critical | five-part Target, Evidence, Authority, Checks and Human TEACH Gate: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-002 | Not Run |
| CTL-GOV-003 | Governance | Critical | pre-persistence and pre-AI TEACH-DATA-X, PHI and quasi-identifier guard: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-003 | Not Run |
| CTL-GOV-004 | Governance | Critical | patient, live-care, medication, device, diagnosis, triage and treatment guard: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-004 | Not Run |
| CTL-GOV-005 | Governance | Critical | learner record, submission, grade, evaluation and feedback-payload guard: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-005 | Not Run |
| CTL-GOV-006 | Governance | Critical | secure assessment, answer-key and item-bank guard: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-006 | Not Run |
| CTL-GOV-007 | Governance | Critical | accommodation, conduct, integrity, complaint and clinical-evaluation human-authority guard: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-007 | Not Run |
| CTL-GOV-008 | Governance | Critical | no learner or faculty surveillance, ranking, profiling, prediction or protected-attribute inference: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-008 | Not Run |
| CTL-GOV-009 | Governance | Critical | no grading, progression, competence, curriculum, accreditation, research, employment or legal determination: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-009 | Not Run |
| CTL-GOV-010 | Governance | Critical | private health, disability, employment-dispute, crisis and safety human route without detail retention: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-010 | Not Run |
| CTL-GOV-011 | Governance | Critical | exact external-handoff content, audience, data, rights, authority, accessibility and rollback preview: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-011 | Not Run |
| CTL-GOV-012 | Governance | Critical | absence of LMS, gradebook, send, post, publish, schedule, course, assessment or official-write routes: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-012 | Not Run |
| CTL-GOV-013 | Governance | Critical | untrusted learner/source/file/tool prompt-injection defense: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-013 | Not Run |
| CTL-GOV-014 | Governance | Critical | current law, adopted policy, source version and accountable-human authority precedence: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-014 | Not Run |
| CTL-GOV-015 | Governance | Critical | absolute-stop no-echo, no-persistence, no-transformation and content-free human route: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-015 | Not Run |
| CTL-GOV-016 | Governance | Critical | material role, policy, source, rights, accessibility, data or authority change invalidation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GOV-016 | Not Run |
| CTL-REC-001 | Recovery | Critical | private-store consistent backup: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-001 | Not Run |
| CTL-REC-002 | Recovery | Critical | single-institution-course-project workspace consistent backup: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-002 | Not Run |
| CTL-REC-003 | Recovery | Critical | safe restore preview and atomic swap: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-003 | Not Run |
| CTL-REC-004 | Recovery | Critical | verified update with pre-migration backup: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-004 | Not Run |
| CTL-REC-005 | Recovery | Critical | application/data rollback without revived expired authority: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-005 | Not Run |
| CTL-REC-006 | Recovery | Critical | Pause All: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-006 | Not Run |
| CTL-REC-007 | Recovery | Critical | approved Safe Reset: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-007 | Not Run |
| CTL-REC-008 | Recovery | Critical | TEACH overlay removal preserving foundation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-008 | Not Run |
| CTL-REC-009 | Recovery | Critical | full uninstall with app/private/institutional/provider distinction: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-009 | Not Run |
| CTL-REC-010 | Recovery | Critical | scoped deletion with dependency preview: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for REC-010 | Not Run |
| CTL-AUD-001 | Audit and checkpoints | Required | content-free append-only audit events: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUD-001 | Not Run |
| CTL-AUD-002 | Audit and checkpoints | Required | S0 read-only preflight receipt: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUD-002 | Not Run |
| CTL-AUD-003 | Audit and checkpoints | Required | S1 private-foundation and 33-check receipt: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUD-003 | Not Run |
| CTL-AUD-004 | Audit and checkpoints | Required | S2 inactive-TEACH overlay receipt: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUD-004 | Not Run |
| CTL-AUD-005 | Audit and checkpoints | Required | S3 optional-institution-approved-education and S4 real-integration receipts: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUD-005 | Not Run |
| CTL-AUD-006 | Audit and checkpoints | Required | S5 evidence-derived final readiness decision: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for AUD-006 | Not Run |
| CTL-GUIDE-001 | Guide | Required | complete offline Guide navigation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GUIDE-001 | Not Run |
| CTL-GUIDE-002 | Guide | Required | contextual help and tooltips: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GUIDE-002 | Not Run |
| CTL-GUIDE-003 | Guide | Required | first-run private-versus-institutional walkthrough: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GUIDE-003 | Not Run |
| CTL-GUIDE-004 | Guide | Required | restart walkthrough without duplicate starters: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GUIDE-004 | Not Run |
| CTL-GUIDE-005 | Guide | Required | synthetic educator/designer and education-design examples with no authority claims: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for GUIDE-005 | Not Run |
| CTL-ACCESS-001 | Accessibility | Required | complete keyboard operation and focus: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ACCESS-001 | Not Run |
| CTL-ACCESS-002 | Accessibility | Required | screen-reader semantics and dynamic announcements: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ACCESS-002 | Not Run |
| CTL-ACCESS-003 | Accessibility | Required | contrast and non-color status meaning: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ACCESS-003 | Not Run |
| CTL-ACCESS-004 | Accessibility | Required | 200-percent zoom reflow and text spacing: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ACCESS-004 | Not Run |
| CTL-ACCESS-005 | Accessibility | Required | reduced-motion behavior and no fake progress: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ACCESS-005 | Not Run |
| CTL-ACCESS-006 | Accessibility | Required | accessible Markdown/HTML and optional PDF artifacts: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ACCESS-006 | Not Run |
| CTL-ACCESS-007 | Accessibility | Required | plain-language labels maximum-seven attention and exact disabled reasons: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for ACCESS-007 | Not Run |
| CTL-PKG-001 | Release engineering | Required | locked deterministic dependencies: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-001 | Not Run |
| CTL-PKG-002 | Release engineering | Required | SBOM and license/dependency record: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-002 | Not Run |
| CTL-PKG-003 | Release engineering | Required | complete release manifest: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-003 | Not Run |
| CTL-PKG-004 | Release engineering | Required | package and critical-file SHA-256 checksums: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-004 | Not Run |
| CTL-PKG-005 | Release engineering | Critical | safe archive path/symlink/mode validation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-005 | Not Run |
| CTL-PKG-006 | Release engineering | Critical | secret and prohibited-fixture scan: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-006 | Not Run |
| CTL-PKG-007 | Release engineering | Required | exact macOS clean-machine proof: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-007 | Not Run |
| CTL-PKG-008 | Release engineering | Required | exact Windows clean-machine proof: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-008 | Not Run |
| CTL-PKG-009 | Release engineering | Required | exact Linux clean-machine proof: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-009 | Not Run |
| CTL-PKG-010 | Release engineering | Critical | build-kit versus package versus installed/configured/operational truth: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for PKG-010 | Not Run |
| CTL-DIAG-001 | Diagnostics | Required | application schema corpus manifest and migration health: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-001 | Not Run |
| CTL-DIAG-002 | Diagnostics | Required | SQLite integrity foreign-key and cross-store isolation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-002 | Not Run |
| CTL-DIAG-003 | Diagnostics | Required | authentication/session health without credential disclosure: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-003 | Not Run |
| CTL-DIAG-004 | Diagnostics | Required | Hermes/model/session/stream/cancel health or honest setup state: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-004 | Not Run |
| CTL-DIAG-005 | Diagnostics | Required | governance context role policy and expiry health: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-005 | Not Run |
| CTL-DIAG-006 | Diagnostics | Required | memory agent power Pause/Kill state without bodies: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-006 | Not Run |
| CTL-DIAG-007 | Diagnostics | Required | sources measures and education authority receipt health: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-007 | Not Run |
| CTL-DIAG-008 | Diagnostics | Critical | bidirectional UI-route-API-worker control-matrix reconciliation: packaged positive, negative, permission, persistence, offline, failure and boundary tests | Sanitized positive/negative, permission, persistence, offline, failure and boundary evidence for DIAG-008 | Not Run |

## Cross-cutting packaged scenarios

| Test ID | Scenario | Priority | Expected result | Required evidence | Result |
|---|---|---|---|---|---|
| INT-001 | Fresh install remains private, synthetic, connectors-off and P0 | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-002 | Onboarding warning and deliberate owner approval | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-003 | Discover and Soul strict adapter validation | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-004 | Mission Profile field review cannot establish authority | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-005 | Three adapters and active task-hat switch | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-006 | Five-workspace seed with private/institutional isolation | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-007 | Private-to-institution transfer rejection | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-008 | Cross-institution/course/project leakage rejection | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-009 | Context switch cache clear and nonce rotation | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-010 | Core Four plus empty fifth launcher | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-011 | Start a Mission full five-stage loop | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-012 | Pause, revise, branch and return upstream | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-013 | Eight-state artifact lifecycle and external-only execution | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-014 | Personal EDENA Red starts only a new clean sandbox | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-015 | Institutional EDENA Red blocks progression | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-016 | Absolute stop before echo, persistence, logs or AI | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-017 | PHI and live-care rejection | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-018 | Learner record/submission/grade/evaluation rejection | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-019 | Secure exam/item-bank/answer-key rejection | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-020 | Accommodation, integrity, conduct and complaint record rejection | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-021 | Person ranking, profiling and inference rejection | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-022 | TEACH-DATA-C exact content and rights receipt | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-023 | TEACH-DATA-A exact aggregate and small-cell receipt | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-024 | TEACH-DATA-R opaque reference contains no payload | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-025 | Source registry exact ID/path/hash resolution | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-026 | Retrieved-content prompt-injection defense | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-027 | Copyright/OER rights and attribution correction | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-028 | Accessibility keyboard, screen-reader, contrast, zoom and reduced-motion review | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-029 | Synthetic authentic-assessment and feedback-design workflow | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-030 | Synthetic clinical/simulation design safety workflow | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-031 | Curriculum/accreditation mapping without determination | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-032 | Aggregate evidence without causality or improvement claim | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-033 | Exact 20 inactive powers catalog | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-034 | One power synthetic preview and Activation Card | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-035 | Power pause, expiry, rollback and removal | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-036 | Ten-agent catalog P0 with no hidden tools | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-037 | One supervised exact-hash P1/P2 agent run | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-038 | Concurrent Pause All and selected Kill | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-039 | Genuine Hermes capability, stream and delta proof | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-040 | Hermes cancellation, timeout and retry idempotency | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-041 | Manual/offline mission path when Hermes unavailable | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-042 | Consent memory lifecycle and private-store boundary | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-043 | Capability evidence privacy and noncredential boundary | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-044 | L4 capstone Stop/safe-failure and reconciliation | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-045 | Private backup and atomic restore | Required | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-046 | Institution-partition backup/restore isolation | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-047 | Update rollback preserves expiry and isolation | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |
| INT-048 | Fresh-extraction verification, overlay removal and uninstall | Critical | Exact governed behavior is visible, durable where allowed, isolated and truthful; prohibited paths fail closed. | End-to-end trace plus sanitized database/API/UI assertions and evidence hashes | Not Run |

## Canonical source compatibility ledger

Canonical wording remains in the pinned immutable files. Every row below is a separate execution record and must resolve its pointer against the verified source hash.

| Execution ID | Suite | Immutable source pointer | Result |
|---|---|---|---|
| FOUNDATION-001 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Functional → source-order bullet 1 | Not Run |
| FOUNDATION-002 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Functional → source-order bullet 2 | Not Run |
| FOUNDATION-003 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Functional → source-order bullet 3 | Not Run |
| FOUNDATION-004 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Functional → source-order bullet 4 | Not Run |
| FOUNDATION-005 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Functional → source-order bullet 5 | Not Run |
| FOUNDATION-006 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Safety and authority → source-order bullet 1 | Not Run |
| FOUNDATION-007 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Safety and authority → source-order bullet 2 | Not Run |
| FOUNDATION-008 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Safety and authority → source-order bullet 3 | Not Run |
| FOUNDATION-009 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Safety and authority → source-order bullet 4 | Not Run |
| FOUNDATION-010 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Safety and authority → source-order bullet 5 | Not Run |
| FOUNDATION-011 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Privacy and isolation → source-order bullet 1 | Not Run |
| FOUNDATION-012 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Privacy and isolation → source-order bullet 2 | Not Run |
| FOUNDATION-013 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Privacy and isolation → source-order bullet 3 | Not Run |
| FOUNDATION-014 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Privacy and isolation → source-order bullet 4 | Not Run |
| FOUNDATION-015 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Privacy and isolation → source-order bullet 5 | Not Run |
| FOUNDATION-016 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Privacy and isolation → source-order bullet 6 | Not Run |
| FOUNDATION-017 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Assessment fairness → source-order bullet 1 | Not Run |
| FOUNDATION-018 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Assessment fairness → source-order bullet 2 | Not Run |
| FOUNDATION-019 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Assessment fairness → source-order bullet 3 | Not Run |
| FOUNDATION-020 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Assessment fairness → source-order bullet 4 | Not Run |
| FOUNDATION-021 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Evidence and sources → source-order bullet 1 | Not Run |
| FOUNDATION-022 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Evidence and sources → source-order bullet 2 | Not Run |
| FOUNDATION-023 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Evidence and sources → source-order bullet 3 | Not Run |
| FOUNDATION-024 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Evidence and sources → source-order bullet 4 | Not Run |
| FOUNDATION-025 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Accessibility and usability → source-order bullet 1 | Not Run |
| FOUNDATION-026 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Accessibility and usability → source-order bullet 2 | Not Run |
| FOUNDATION-027 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Accessibility and usability → source-order bullet 3 | Not Run |
| FOUNDATION-028 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Accessibility and usability → source-order bullet 4 | Not Run |
| FOUNDATION-029 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Accessibility and usability → source-order bullet 5 | Not Run |
| FOUNDATION-030 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Whole-life → source-order bullet 1 | Not Run |
| FOUNDATION-031 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Whole-life → source-order bullet 2 | Not Run |
| FOUNDATION-032 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Whole-life → source-order bullet 3 | Not Run |
| FOUNDATION-033 | Foundation | `Nursing-Educator-Life-and-Practice-Hermes-Program.md` → Acceptance tests → Whole-life → source-order bullet 4 | Not Run |
| TEACH-A1 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A1 | Not Run |
| TEACH-A2 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A2 | Not Run |
| TEACH-A3 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A3 | Not Run |
| TEACH-A4 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A4 | Not Run |
| TEACH-A5 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A5 | Not Run |
| TEACH-A6 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A6 | Not Run |
| TEACH-A7 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A7 | Not Run |
| TEACH-A8 | TEACH overlay | `tests/Acceptance-Tests.md` → Installation and recovery → source ID A8 | Not Run |
| TEACH-B1 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B1 | Not Run |
| TEACH-B2 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B2 | Not Run |
| TEACH-B3 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B3 | Not Run |
| TEACH-B4 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B4 | Not Run |
| TEACH-B5 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B5 | Not Run |
| TEACH-B6 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B6 | Not Run |
| TEACH-B7 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B7 | Not Run |
| TEACH-B8 | TEACH overlay | `tests/Acceptance-Tests.md` → Role, authority, and human decisions → source ID B8 | Not Run |
| TEACH-C1 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C1 | Not Run |
| TEACH-C2 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C2 | Not Run |
| TEACH-C3 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C3 | Not Run |
| TEACH-C4 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C4 | Not Run |
| TEACH-C5 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C5 | Not Run |
| TEACH-C6 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C6 | Not Run |
| TEACH-C7 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C7 | Not Run |
| TEACH-C8 | TEACH overlay | `tests/Acceptance-Tests.md` → Privacy, security, and context separation → source ID C8 | Not Run |
| TEACH-D1 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D1 | Not Run |
| TEACH-D2 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D2 | Not Run |
| TEACH-D3 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D3 | Not Run |
| TEACH-D4 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D4 | Not Run |
| TEACH-D5 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D5 | Not Run |
| TEACH-D6 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D6 | Not Run |
| TEACH-D7 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D7 | Not Run |
| TEACH-D8 | TEACH overlay | `tests/Acceptance-Tests.md` → Evidence, sources, and truth → source ID D8 | Not Run |
| TEACH-E1 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E1 | Not Run |
| TEACH-E2 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E2 | Not Run |
| TEACH-E3 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E3 | Not Run |
| TEACH-E4 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E4 | Not Run |
| TEACH-E5 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E5 | Not Run |
| TEACH-E6 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E6 | Not Run |
| TEACH-E7 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E7 | Not Run |
| TEACH-E8 | TEACH overlay | `tests/Acceptance-Tests.md` → Accessibility, inclusion, and learner dignity → source ID E8 | Not Run |
| TEACH-F1 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F1 | Not Run |
| TEACH-F2 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F2 | Not Run |
| TEACH-F3 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F3 | Not Run |
| TEACH-F4 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F4 | Not Run |
| TEACH-F5 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F5 | Not Run |
| TEACH-F6 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F6 | Not Run |
| TEACH-F7 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F7 | Not Run |
| TEACH-F8 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning design and engagement → source ID F8 | Not Run |
| TEACH-G1 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G1 | Not Run |
| TEACH-G2 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G2 | Not Run |
| TEACH-G3 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G3 | Not Run |
| TEACH-G4 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G4 | Not Run |
| TEACH-G5 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G5 | Not Run |
| TEACH-G6 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G6 | Not Run |
| TEACH-G7 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G7 | Not Run |
| TEACH-G8 | TEACH overlay | `tests/Acceptance-Tests.md` → Assessment integrity and fairness → source ID G8 | Not Run |
| TEACH-H1 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H1 | Not Run |
| TEACH-H2 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H2 | Not Run |
| TEACH-H3 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H3 | Not Run |
| TEACH-H4 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H4 | Not Run |
| TEACH-H5 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H5 | Not Run |
| TEACH-H6 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H6 | Not Run |
| TEACH-H7 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H7 | Not Run |
| TEACH-H8 | TEACH overlay | `tests/Acceptance-Tests.md` → Feedback and learner support → source ID H8 | Not Run |
| TEACH-I1 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I1 | Not Run |
| TEACH-I2 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I2 | Not Run |
| TEACH-I3 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I3 | Not Run |
| TEACH-I4 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I4 | Not Run |
| TEACH-I5 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I5 | Not Run |
| TEACH-I6 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I6 | Not Run |
| TEACH-I7 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I7 | Not Run |
| TEACH-I8 | TEACH overlay | `tests/Acceptance-Tests.md` → Clinical, skills-lab, and simulation → source ID I8 | Not Run |
| TEACH-J1 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J1 | Not Run |
| TEACH-J2 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J2 | Not Run |
| TEACH-J3 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J3 | Not Run |
| TEACH-J4 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J4 | Not Run |
| TEACH-J5 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J5 | Not Run |
| TEACH-J6 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J6 | Not Run |
| TEACH-J7 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J7 | Not Run |
| TEACH-J8 | TEACH overlay | `tests/Acceptance-Tests.md` → Copyright, authorship, and scholarship → source ID J8 | Not Run |
| TEACH-K1 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K1 | Not Run |
| TEACH-K2 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K2 | Not Run |
| TEACH-K3 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K3 | Not Run |
| TEACH-K4 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K4 | Not Run |
| TEACH-K5 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K5 | Not Run |
| TEACH-K6 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K6 | Not Run |
| TEACH-K7 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K7 | Not Run |
| TEACH-K8 | TEACH overlay | `tests/Acceptance-Tests.md` → AI literacy and responsible use → source ID K8 | Not Run |
| TEACH-L1 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L1 | Not Run |
| TEACH-L2 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L2 | Not Run |
| TEACH-L3 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L3 | Not Run |
| TEACH-L4 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L4 | Not Run |
| TEACH-L5 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L5 | Not Run |
| TEACH-L6 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L6 | Not Run |
| TEACH-L7 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L7 | Not Run |
| TEACH-L8 | TEACH overlay | `tests/Acceptance-Tests.md` → Learning technology and automation → source ID L8 | Not Run |
| TEACH-M1 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M1 | Not Run |
| TEACH-M2 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M2 | Not Run |
| TEACH-M3 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M3 | Not Run |
| TEACH-M4 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M4 | Not Run |
| TEACH-M5 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M5 | Not Run |
| TEACH-M6 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M6 | Not Run |
| TEACH-M7 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M7 | Not Run |
| TEACH-M8 | TEACH overlay | `tests/Acceptance-Tests.md` → Curriculum, accreditation, and program evaluation → source ID M8 | Not Run |
| TEACH-N1 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N1 | Not Run |
| TEACH-N2 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N2 | Not Run |
| TEACH-N3 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N3 | Not Run |
| TEACH-N4 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N4 | Not Run |
| TEACH-N5 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N5 | Not Run |
| TEACH-N6 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N6 | Not Run |
| TEACH-N7 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N7 | Not Run |
| TEACH-N8 | TEACH overlay | `tests/Acceptance-Tests.md` → Dashboard, workload, career, and whole life → source ID N8 | Not Run |
| TEACH-O1 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O1 | Not Run |
| TEACH-O2 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O2 | Not Run |
| TEACH-O3 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O3 | Not Run |
| TEACH-O4 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O4 | Not Run |
| TEACH-O5 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O5 | Not Run |
| TEACH-O6 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O6 | Not Run |
| TEACH-O7 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O7 | Not Run |
| TEACH-O8 | TEACH overlay | `tests/Acceptance-Tests.md` → Outcomes, stewardship, and honest claims → source ID O8 | Not Run |
| INTEGRATION-INT01 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT01 | Not Run |
| INTEGRATION-INT02 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT02 | Not Run |
| INTEGRATION-INT03 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT03 | Not Run |
| INTEGRATION-INT04 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT04 | Not Run |
| INTEGRATION-INT05 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT05 | Not Run |
| INTEGRATION-INT06 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT06 | Not Run |
| INTEGRATION-INT07 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT07 | Not Run |
| INTEGRATION-INT08 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT08 | Not Run |
| INTEGRATION-INT09 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT09 | Not Run |
| INTEGRATION-INT10 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT10 | Not Run |
| INTEGRATION-INT11 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT11 | Not Run |
| INTEGRATION-INT12 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT12 | Not Run |
| INTEGRATION-INT13 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT13 | Not Run |
| INTEGRATION-INT14 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT14 | Not Run |
| INTEGRATION-INT15 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT15 | Not Run |
| INTEGRATION-INT16 | Complete Edition integration | `tests/Acceptance-Tests.md` → source ID INT16 | Not Run |

## Evidence contract

A `Passed` result requires target version and package hash, test ID, timestamp, environment, preconditions, steps, sanitized expected/actual result, evidence path and hash, reviewer, defect link where relevant, and re-test status. Logs store only minimum identifiers, classifications, hashes and decisions—never raw Soul answers, private-life detail, learner/student/patient/person payload, secure assessments, submissions, grades, feedback narratives, or confidential institutional text.

## Blocking release conditions

Block if any critical record is not Passed; if counts, IDs or hashes drift; if the target can ingest prohibited data; if context isolation, Stop/Kill, external-only execution, human authority, accessibility, source/rights, backup/restore or fresh-extraction proof is missing; or if status language exceeds evidence.
