{
  "canonicalUrl": "https://xn--mwe.com/continuous-assurance/cap-k08-003/",
  "degrades": [
    "unresolved provenance gap",
    "revoked attestation",
    "single-source recovery unavailable"
  ],
  "freshnessDays": 90,
  "id": "CAP-K08-003",
  "incidentTriggers": [
    "supplier compromise",
    "malicious firmware",
    "poisoned artifact",
    "counterfeit component",
    "incomplete BOM"
  ],
  "interval": "on release, supplier notice, BOM change, and quarterly planning review",
  "name": "Software, model, firmware, and hardware supply chain",
  "releaseId": "K12-2026-08-16",
  "repair": [
    "quarantine artifact",
    "restore trusted baseline",
    "update provenance and supplier decision"
  ],
  "retest": [
    "rebuild or attestation replay",
    "integration regression",
    "recovery dependency test"
  ]
}