ASSURANCE
From evidence to bounded assurance.
The evidence model connects governance requirements and controls to records of system behavior, their provenance, checks against defined criteria, findings and conclusions that remain within scope.
A BOUNDED RECORD
Scope and limitation travel with the finding.
THE OPERATING DISTINCTION
Controls and records do not settle the assurance question.
Risk management generates and governs controls and evidence. An examination asks what the evidence is sufficient to support. A policy, passing test or log entry needs context, integrity and relevance before it can support a conclusion.
THE EVIDENCE CHAIN
Seven elements. One accountable conclusion.
The chain is a conceptual model for a defined system, time and assurance question. The operational examination procedure is described separately.
01
Requirement
The obligation or question to be addressed.
02
Control
The operational condition or safeguard.
03
Evidence
The records offered for examination.
04
Provenance
Origin, context, system state and time.
05
Verification
Evidence checked against defined criteria.
06
Finding
What the examined record supports or leaves unresolved.
07
Bounded Assurance
A conclusion confined to the stated scope and limitations.
THREE WORKING PHASES
Define. Substantiate. Conclude.
The seven elements operate through three phases; the phase labels do not replace the record of individual steps.
REQUIREMENT → CONTROL
Define
Set the requirement or question and the relevant control context.
EVIDENCE → PROVENANCE → VERIFICATION
Substantiate
Assemble evidence, establish provenance and verify against defined criteria.
FINDING → BOUNDED ASSURANCE
Conclude
Record what the evidence supports, leaves unresolved and cannot establish.
THE EVIDENCE RECORD
The artifact alone is not enough.
An assurance-ready record must preserve its origin, stated basis, verification state, limits and meaningful absence. Reconstruction cannot manufacture a missing record.
01
Source
Where the record came from and how it relates to the system or claim.
02
Basis
What the record states was observed, tested, reproduced or reviewed, and on what stated basis.
03
Verification
What was checked against defined criteria, by whom or by what process, and with what result.
04
Limits
What the record does not establish outside its scope.
05
Absence
What expected record, event or signal is missing, conflicting or unavailable.
SUPPORTING LAYERS
A method supported by distinct bodies of work.
Applied research examines real evidence problems; frameworks provide context; bounded examination methods apply the model; training develops practitioner capability.
Research
Empirical questions and evidence limits.
Frameworks
Control, incident, response and Physical AI context.
Examination methods
Scope, criteria, findings and limitations.
Training
Repeatable practitioner use.
CURRENT ENTRY POINT
The Evidence Readiness Pilot.
One system. One bounded assurance question. One defined evidence base. The pilot examines whether available records can support a bounded finding and identifies what would be required for a stronger one.
ONE BOUNDED QUESTION
No blanket maturity or certification claim.
CURRENT BOUNDARY
The model is being tested.
The evidence model and workflows are being tested through bounded examination methods. Machine-readable tooling is in development. Independent conformance testing and certification are not yet operating.
WHAT THIS MEANS IN PRACTICE
Make the question smaller than the claim.
The current starting point is evidence readiness for a defined system, not generalized certification. Security, governance and assurance teams can use the result to decide what further examination or engineering is warranted.