Evidence limitation
Source code is not current operation
Direct limitation
It does not prove that an authorized instance is deployed, reachable, correctly configured, processing current state, or performing institutional functions.
Artifact or claim that may be supported
Implementation inspection, version comparison, reproducible build, and intended behavior analysis.
What the evidence does not establish
It does not prove that an authorized instance is deployed, reachable, correctly configured, processing current state, or performing institutional functions.
Additional evidence required
Deployment identity, service endpoint, configuration evidence, time-bounded external observations, current signing keys, state transitions, and attributable actions.
Mitigation
Deployment identity, service endpoint, configuration evidence, time-bounded external observations, current signing keys, state transitions, and attributable actions.
Supporting sources
No public source record is assigned; the claim remains bounded by project doctrine, a governed report, or an explicitly unresolved evidence requirement.