{
  "purpose": "Retained scoped evidence supporting the worked module journeys",
  "clientExecution": "Recorded separately in the editable UAT sheets",
  "evidence": [
    {
      "id": "KRN-E-CORE",
      "module": "core",
      "title": "Kernel Core",
      "coverage": "Party, relationship, geography and immutable model publication",
      "scope": "Retained database and browser readback exercises",
      "result": "Person and organisation creation, contact/address ownership, relationship and geography checks, concurrent model review and immutable snapshots are recorded in the retained results.",
      "sourceDigests": [
        "4b56d3f622c83955e687650099cf4842d59e3b7058560ee26ddc372e0824bc10",
        "29f5a9f2e90a68bf1d11e4a7a30f208e9f0aaabe33762ac3bd6f3d90bbb1460b",
        "114b57a9275ed40f72cf6a532c465e813b8a94371c3741a3c8262584ec436757",
        "7da44481fe3677ecde83714c28ff8cfe3570fd955a9012e447f16fbc87fa4646",
        "816f865e2e16fade4d5ccef3677b2877ac2b042d3d8dc35e19e5635e7296e89f",
        "c47a3552963d668c0714756208f607b39d3e31b663c2f2c0fcda8224201a1442"
      ]
    },
    {
      "id": "KRN-E-TENANT",
      "module": "tenant",
      "title": "Tenant Engine",
      "coverage": "Tenant onboarding, identity, configuration, commercial and lifecycle",
      "scope": "Retained rollback and connected configuration exercises",
      "result": "Saved onboarding, stale-edit protection, identity capture, reviewed configuration, renewal and truth checks are covered. Connected lifecycle proof uses the configuration provider; unbound providers are not represented as completed infrastructure operations.",
      "sourceDigests": [
        "ccdb730d876fb073a8c63ed111ba1c5156375e9bc329ce702f04f0ffdfe02be5",
        "2a52a79ad54ef5579eaae6c2cbeb760cc66caf393459023597d33346073994d1",
        "93123f1b14fe8fa64f425a75d1f8853c4432a874f4ebbe0d8f188abddc97a0d7",
        "686fb89036b6cc6c890a5dbc4bff2b863589d6a6da9c862da4cfc94f2702fd01",
        "faba7991cdebf949296c90be7047534c185175ddd9fe410883da7972f04a9499",
        "8f075f577cefafcc943278a271cea37baaa857c74746fa6532a9e590a2c7c3f9",
        "d776ae2603edb8322b58a94f8a31d25fc7536b5efae50b1d51f0bb7d7cd777d6",
        "654d0c971cb5cecbd2d983a35184a6482ce765289476b117db231e296c0da5f2"
      ]
    },
    {
      "id": "KRN-E-TCP",
      "module": "tcp",
      "title": "Tenant Control Plane",
      "coverage": "Deployment, policy, entitlement, activation and exit controls",
      "scope": "Retained rollback exercises and connected local runtime recovery",
      "result": "Entitlement and version guards are exercised. Deployment recovery includes a connected local runtime. Atomic activation and exit fixtures use synthetic signer/owner evidence in rollback tests; they do not prove a real infrastructure activation, cryptographic signer integration or production data deletion.",
      "sourceDigests": [
        "7095ac6123b74bf4b8e38e1e6a27b8eb86a6abbbc7b8280087adf08443a5e8e2",
        "a2e9b806066484606436354978d1fa2e4846435312e12d980e66eec9c527a090",
        "249febcf1a3c658a31a291443cbebdcbe890280bb44d168dbe62ec347bfd2d98",
        "86cb64587b90d1a4faac2eaa4750f2ef79cd0c3dbf1a0c41c44d6e9a2821f64f",
        "6fe4547b065202f4fba38576b2700c0de1b46de0a89eae6ecf8badeea8a548db",
        "51bdf34c20007caa1fa6f56a86dcd968d64bb675b39f082ada55dec34e7195b1"
      ]
    },
    {
      "id": "KRN-E-AXIS",
      "module": "axis",
      "title": "Axis",
      "coverage": "Screen ownership, source binding, presentation and publication",
      "scope": "Retained database acceptance and current interface regression",
      "result": "Screen draft/version guards, source-field validation, saved preview, independent review, publication and retirement are exercised. Current interface checks cover owning-screen context, header help and sidebar leaf indicators.",
      "sourceDigests": [
        "c90dbf6b91d7ea07e6d1d11a167807bb1ce6f971c5efc1ffddaf876322c8904f",
        "fcbc311ef95aa96853109c36bf237ab38df28acdadda6e8648e9bfb4035993fc",
        "4bc5e45dd94f2e297a52e26b4e6738433ece1fc01dd3d1dcbd688abcb4770db2",
        "7e21bd464d955d96eb1b4a9a9ec88c957a9a1a1ec7e51d0e8ea96f73ad6a0d22",
        "6c0ab95c1388da15f93b6d9490db2c42250fa26e8e213ab8ef852e84ed8f62cb",
        "1a538820df21372dab8aa737ffac377c8720a55125462427f9b1b6b69ca9e4e1"
      ]
    },
    {
      "id": "KRN-E-TIMEVAULT",
      "module": "timevault",
      "title": "TimeVault",
      "coverage": "Effective intervals, middle-period corrections and history",
      "scope": "Retained transactional database and interface exercises",
      "result": "Independent decisions, exact replay, stale revisions, three-successor middle splits, historical as-of results and parent/child deletion guards are exercised. Calendar examples in the guide are training inputs to prepare.",
      "sourceDigests": [
        "4238bd277f89311a874c822226aada8d98d032282ec8eadc1f80ff49d3f644a1",
        "186cc8009ad40a7796f070e4267aa83b54cc064beab33c7839318bf6df902ec4",
        "aab6f744eff08158e8bb4fff53338e43841c44a9735993042cba63d6f13e8aff"
      ]
    },
    {
      "id": "KRN-E-VISTA",
      "module": "vista",
      "title": "Vista",
      "coverage": "Connections, source datasets, modeled outputs and analytical rendering",
      "scope": "Retained native regression and disposable source fixtures",
      "result": "The suites exercise connection discovery, typed joins/expressions, dataset review, exact report/dashboard preview and working-copy recovery. Eight analytical styles and invalid configuration paths are covered. The three-row financial summary is a synthetic teaching fixture; its arithmetic is an expected result to check.",
      "sourceDigests": [
        "f0007762a9c5eaaa0d2a4909226327a55ecd2792a16cea7a1eb63baddfa8e27b",
        "775bea1c6b6ec2ad3cdad6bb277f8031c67fca085ce52e162e0a35629e882764",
        "b8270e3adabe78dc76f8f791d36a162ab7bb1270b5fa702ea44b7cb37a59af3f",
        "3e845517689318b63fafa9a383d8014907c80f47b502491efc59c3883f7d70f7",
        "895f30414a62e7b785c856538e9226c402224dc5d51b961a90eecacca1b5878c",
        "7ef406af9a34e03be0730f02776bed5b42f4ce5b50f4f97d0c99cb203af90690",
        "711482ba475a5744d191ac60581621572bb01ba9b40beb1356ae4d2b8931d3a1"
      ]
    },
    {
      "id": "KRN-E-PULSE",
      "module": "pulse",
      "title": "Pulse",
      "coverage": "Template contracts, generation, preview and notifications",
      "scope": "Retained native database and worker contract regression",
      "result": "Saved bindings, supported scalar targets, related-row snapshots, exact preview identity, publication checks and revoked/inactive generation dependencies are exercised. Generation, dispatch, provider acceptance, receipt and custody admission are separate observable outcomes.",
      "sourceDigests": [
        "bcddd7fb401af77b8127a7f931f7bece38df9796097187012573c4f62d0fbd09",
        "ee0e7c6ae8f366575b1486b0b027a497002c0a5ef4512de0baa49dd9dfbf6dbf",
        "2dd2e1f50a47f967aba48389f19886d27fa50bafe24c8c2a4df773431bf55078",
        "4b5bbb3a0dba0cc800161658adbda4c5381d67158d98cb2fd011915e7ad9ea7a",
        "d3271e51cd95a209f4a9e67532d1c5fa0c71d64696e9680b41c1283ed40464b5",
        "5dc0e16f59194085eeabdba635299e44af2ba4865286361ee28405b8acd5578e"
      ]
    },
    {
      "id": "KRN-E-SCHEDULER",
      "module": "scheduler",
      "title": "Enterprise Scheduler",
      "coverage": "Timed producers, calendars, queues, batches and recovery",
      "scope": "Retained native/JVM acceptance in isolated training stores",
      "result": "Letter and dashboard producer journeys, calendar timing, worker drain, queue pause/resume, bounded backfills and pinned batch dependencies have recorded results. Batch acceptance uses isolated profiles. Durable success, waiting and uncertain states are distinct; artifact generation does not itself prove external dispatch. Runtime deployment remains delivered separately from these exercise receipts.",
      "sourceDigests": [
        "0d04fc987628d63751828cd472185809edb46e2a648e1476f577e1f33616a48d",
        "386b75d6b935b516b65e60085ac269bf1ed86c24ce4be4c1905a92749490039d",
        "465ec4fa48a555e61e90b50db9b9b4f34bbad68b5fdae1e6a03d8bb4577de633",
        "8ad89a328fb6b91b27b06ec60b4a44e75f2f09e47bc0c90d0c2685e80a192a56",
        "64770a0eb418bb6fb00a137e5b9f015480a0ccc03fd62e94c7c7eeda4fdaff85",
        "1b903e9bb2490d2f47b9728649fd418269b9f12896420da60611ceccd3c47331",
        "106935b9e29bb7a023cfeaa171ed532c496c58792d8f59cfdf9b42e2e8583cdc",
        "63019f8a9aa95cd20d8a4f4f5c3e2eb13aa2dcfd9f04a8368526b1aa98c883f9",
        "c42d008d2c4b7a34e66152dc1c5f80fd9ee52f97851b06c02acdd5fb245e63ed"
      ]
    },
    {
      "id": "KRN-E-CUSTODIA",
      "module": "custodia",
      "title": "Custodia",
      "coverage": "Schemas, capture, custody, disclosure, holds and archives",
      "scope": "Retained transactional document-governance exercises",
      "result": "Typed metadata, schema succession, atomic capture, version access, disclosure/export, overlapping holds, archive retrieval and disposal guards are exercised. A generated artifact, admitted document, disclosure package and archive copy have separate identities and lifecycle decisions.",
      "sourceDigests": [
        "07dda7eb1a377cfa70f20c6bfcf43c8a09fa009361052c535af87f68c61f821e",
        "eb7c56b34d688bac96b2386b662a0645a8d8191d2efbb5b5cf1e172ef1512cd4",
        "bb583b9c6c79d042766fd64e4b172ad909db3441eb6433650bda020c416e007f",
        "b26d2dfc316d8ede06ac0ec743081023df646663236eeb3b79bd645542ce15a9",
        "d64621f3ca49669aec5bffb445d39e3e4cd1c7e5ad0323b2b6f3ef0248c15c74",
        "fbbd9fc42dbaeec24e2afc7fbe7440154caef3f3e233614e90b39aca2fe8bc3b",
        "2ac8da6214605505071f1ad366b59daadfcea4a06b11543d8a527f4034807efa",
        "823b3f5d0ed4858eac3ace58813931ef381854e0dd9aef4fab7762dd0a19264c"
      ]
    },
    {
      "id": "KRN-E-MEDES",
      "module": "medes",
      "title": "MEDES",
      "coverage": "Member case, evidence intake and customer follow-up",
      "scope": "Retained transactional case and document-operation exercises",
      "result": "Case idempotency/scope, split lineage, quarantined evidence, named-recipient secure uploads, work assignment and case-bound messaging are exercised. Responded status requires the relevant evidence; provider acceptance is not customer response. Target activation, source freshness and configured providers must be checked before a live demonstration.",
      "sourceDigests": [
        "6e767f0094d366f71b9af2f7faec105ee51c583a760c23f15f200f6dd37847d5",
        "de81d8860f9aa2dae69c12fd4e3bcb6cd3df1954a39ce56ee10683c93820a800",
        "1f95c9f78be91935e21970f8c187049e53c2b8b04aad3d6f5fd3719548ac51f0",
        "62f7cd643849e912940c4b356c9c3caf23d7e6e195601a875c300a7e2c8a58b6",
        "26aeb4a8d5945fcb505997a32de88b2e250bd55fae7c558fad3130966969f585",
        "2f5b9c8e25a9ab2bda5b6ee7595beb9d0c526080c5c27aa142f4d4956b1e7e98",
        "3d11f5e6b1dd4e6089c55399894e8ee5e4832856daff799c1b4df1ba2a114f7a"
      ]
    },
    {
      "id": "KRN-E-NEXORA",
      "module": "nexora",
      "title": "Nexora",
      "coverage": "Authoring, assessment, assignment and learning assurance",
      "scope": "Retained database regression and configured reference contracts",
      "result": "Independent publication, learner/author isolation, written-answer grading, completion and credential records have retained checks. The worked assessment distinguishes submitted, awaiting review and final pass states; session, path and campaign examples require their published prerequisites.",
      "sourceDigests": [
        "c9ede6b4d343957f76eee4f5f88cae97b88f516b5f00fd6434cc63972cc70c0c",
        "15b6b6c01d53f78c95145dd1758dbc5c9dd299febd326089781de5abe4d9bc82",
        "c47c0cd3958e01f6a7f7b48b30e8aa494ec41ec6ac56cbe776c198619f2809b2"
      ]
    },
    {
      "id": "KRN-E-IAM",
      "module": "iam",
      "title": "Identity and Access Management",
      "coverage": "Explicit mapping and scoped user access governance",
      "scope": "Retained behavioral, admission and interface regression",
      "result": "New domains start with zero profile mappings; explicit approval and reverse views are checked. Delegation expiry, separation of duties, timed exceptions, review populations, ABAC, step-up and admission replay checks are retained. Ordinary independence and an explicitly assigned named administrator exception are different operating cases.",
      "sourceDigests": [
        "f0ae70af49e56683d0e1af71b9171550af663e047c8a67e5e9af0afe54ee4916",
        "d63582c73397d564f15f01e2ce13832639c6c678e92ad76e63d7421b94763cf9",
        "cb166a0c8a9244718360fcdca40959df3ced90e365ea8307ce95a5e5e0d41983",
        "bec06846483e31e1a3e6ec17dd01402f22fae92af12803f29a00c5df42ae19d0",
        "9f53b727f9fad9e6588137c00656a5f60be662fdc6f3a7c158ee5f7e248bcfec",
        "1a538820df21372dab8aa737ffac377c8720a55125462427f9b1b6b69ca9e4e1"
      ]
    },
    {
      "id": "KRN-E-ATLAS",
      "module": "atlas",
      "title": "Kernel Atlas",
      "coverage": "Engineering registers, traceability and controlled publication",
      "scope": "Retained disposable engineering-register acceptance",
      "result": "The retained validation records 46 native types, 44 editable types, typed references, evidence integrity, independent test review, safe CSV export, mobile checks and UI journeys. Its host publication was not tested on Hostinger. It does not implement visual workflow execution, document-format publication or a complete lifecycle automation engine. A new local PHP test was not run because that runtime is unavailable; the stated results are retained evidence.",
      "sourceDigests": [
        "68b28d09f2246d4075e1d5a6e635ef99775d0a7551c3825d3b56a7a424076d2a",
        "39c7551af9e689632739c85363df99011956a5b0057141d35c15a4485e9995f3",
        "817e1ec8da280369e7ccb4a383f4085ca13574c86c96e4d129613d6c6847ce4c",
        "f0a440717060c24431c43a23dc1f6c5cff9d686c1726b28dcbed38fc1c4dfdf8"
      ]
    }
  ]
}