- Exact external binary/CSV paths appear in
examples/DATA_PROVENANCE.md. - CI scans committed and generated mirror text for high-risk patterns.
- Contracts separate units, row types, quantities, percentages, and source versus derived fields.
- Mirror manifests preserve source hashes and generated-body integrity.
- Data-quality gates fail closed and remain linked to validation evidence.
- Reference-only sources never enter the conversion pipeline.
Public evidence document
Evidence controls
Evidence controls Exact external binary/CSV paths appear in examples/DATA PROVENANCE.md . CI scans committed and generated mirror text for high risk…