Source identity
Module digest, execution identity and policy revision.
VERIFICATION
Evidence should be checkable by another system.
OSR produces operational records; an independent verifier such as QR-V™ may check evidence integrity, provenance and record association.
Evidence contract
Decision context
Requested capability, resource and authorization outcome.
Execution outcome
Timestamp, outcome classification and bounded diagnostic metadata.
Integrity controls
Signatures, trusted key management, anti-replay context and immutable checkpoints where deployed.
No circular trust
QR-V™ should validate evidence without controlling OSR™ permissions, and OSR™ should run safely without QR-V™. A signed record indicates a signer attested to data; it does not, by itself, prove that the underlying host was uncompromised or the action was safe.