{
  "schema": "enrichment_source_registry_v01",
  "issue": 412,
  "parent_issue": 411,
  "status": "static_governed_registry_only",
  "artifact_path": "docs/product-architecture/enrichment_source_registry_v01.json",
  "global_default_source_pack": "core_ai_capability",
  "source_packs": [
    "core_ai_capability",
    "ai_security",
    "ai_governance",
    "gxp_regulated_life_sciences",
    "medical_device_samd",
    "ot_endpoint_infrastructure",
    "foundation_model_providers",
    "agent_rag_engineering",
    "independent_evidence",
    "vendor_product_docs"
  ],
  "required_fields": [
    "source_id",
    "display_name",
    "source_pack",
    "authority_class",
    "source_role",
    "trust_ceiling",
    "activation_policy",
    "default_policy",
    "status",
    "lifecycle_status",
    "jurisdiction",
    "version_label",
    "license_mode",
    "retrieval_mode",
    "browser_fetch_allowed",
    "provider_call_allowed",
    "package_authority",
    "registry_mutable_by_user",
    "owner_approval_required",
    "marketing_allowed",
    "not_useful_for"
  ],
  "enums": {
    "authority_class": [
      "binding_regulation",
      "regulator_guidance",
      "official_standard",
      "official_framework",
      "industry_control_catalog",
      "threat_taxonomy",
      "vendor_documentation",
      "engineering_reference",
      "incident_or_benchmark_evidence",
      "user_supplied_session_text"
    ],
    "source_role": [
      "obligation",
      "interpretive_guidance",
      "risk_framework",
      "control_catalog",
      "testable_requirement",
      "threat_taxonomy",
      "lifecycle_model",
      "impact_assessment",
      "implementation_reference",
      "product_behavior",
      "incident_evidence"
    ],
    "status": [
      "active_default",
      "active_available",
      "profile_default",
      "preview_only",
      "licensed_required",
      "unavailable",
      "deprecated",
      "retired",
      "admin_gated"
    ],
    "lifecycle_status": [
      "final",
      "draft",
      "superseded",
      "preview_only",
      "unknown"
    ],
    "license_mode": [
      "public",
      "metadata_only",
      "licensed_excerpt_required",
      "rights_cleared_controlled_excerpt"
    ],
    "activation_policy": [
      "global_default",
      "profile_triggered",
      "product_triggered",
      "user_selected",
      "admin_gated",
      "unavailable"
    ],
    "default_policy": [
      "global_default",
      "profile_default",
      "not_default"
    ],
    "retrieval_mode": [
      "static_metadata",
      "owner_approved_runtime_profile_required",
      "licensed_or_rights_gated",
      "not_retrievable"
    ],
    "trust_ceiling": [
      "package_context_only_not_authority",
      "official_source_for_self",
      "regulatory_or_standard_source_not_package_authority",
      "independent_evidence_not_authority",
      "session_only_not_persisted"
    ]
  },
  "boundary_confirmations": {
    "runtime_provider_or_model_behavior_changed": false,
    "external_fetching_added": false,
    "arbitrary_web_search_added": false,
    "browser_side_source_retrieval_added": false,
    "browser_side_provider_call_added": false,
    "package_authority_changed": false,
    "preview_source_set_changed": false,
    "production_source_set_changed": false,
    "licensed_standard_full_text_ingested": false,
    "unofficial_mirrors_used_for_rights_sensitive_content": false,
    "user_session_sources_persisted": false,
    "issue_78_mutated": false,
    "issue_271_reopened": false,
    "codex_automerge_applied": false
  },
  "sources": [
    {
      "source_id": "nist-ai-rmf-1-0",
      "display_name": "NIST AI RMF 1.0",
      "source_pack": "core_ai_capability",
      "authority_class": "official_framework",
      "source_role": ["risk_framework", "impact_assessment"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "global_default",
      "default_policy": "global_default",
      "status": "active_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "1.0",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["package_authority", "vendor_product_behavior", "regulatory_proof"]
    },
    {
      "source_id": "nist-ai-600-1-generative-ai-profile",
      "display_name": "NIST AI 600-1 Generative AI Profile",
      "source_pack": "core_ai_capability",
      "authority_class": "official_framework",
      "source_role": ["risk_framework", "interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "global_default",
      "default_policy": "global_default",
      "status": "active_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "AI 600-1",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["package_authority", "vendor_product_behavior", "regulatory_proof"]
    },
    {
      "source_id": "nist-csf-2-0",
      "display_name": "NIST Cybersecurity Framework 2.0",
      "source_pack": "core_ai_capability",
      "authority_class": "official_framework",
      "source_role": ["risk_framework", "control_catalog"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "global_default",
      "default_policy": "global_default",
      "status": "active_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "2.0",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["package_authority", "vendor_product_behavior", "regulatory_proof"]
    },
    {
      "source_id": "nist-sp-800-218-ssdf",
      "display_name": "NIST SP 800-218 Secure Software Development Framework",
      "source_pack": "core_ai_capability",
      "authority_class": "official_framework",
      "source_role": ["lifecycle_model", "control_catalog", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "global_default",
      "default_policy": "global_default",
      "status": "active_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "SP 800-218",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["package_authority", "vendor_product_behavior", "regulatory_proof"]
    },
    {
      "source_id": "nist-ai-100-2e2025",
      "display_name": "NIST AI 100-2e2025",
      "source_pack": "ai_security",
      "authority_class": "official_framework",
      "source_role": ["interpretive_guidance", "risk_framework"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "AI 100-2e2025",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "package_authority", "vendor_product_behavior"]
    },
    {
      "source_id": "mitre-atlas",
      "display_name": "MITRE ATLAS",
      "source_pack": "ai_security",
      "authority_class": "threat_taxonomy",
      "source_role": ["threat_taxonomy", "implementation_reference"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "package_authority"]
    },
    {
      "source_id": "owasp-aisvs",
      "display_name": "OWASP AI Security Verification Standard",
      "source_pack": "ai_security",
      "authority_class": "industry_control_catalog",
      "source_role": ["control_catalog", "testable_requirement"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "regulatory_proof", "package_authority"]
    },
    {
      "source_id": "owasp-genai-llm-top-10-2025",
      "display_name": "OWASP GenAI / LLM Top 10 2025",
      "source_pack": "ai_security",
      "authority_class": "industry_control_catalog",
      "source_role": ["control_catalog", "threat_taxonomy", "testable_requirement"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "2025",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "regulatory_proof", "package_authority"]
    },
    {
      "source_id": "cisa-nsa-ncsc-secure-ai-system-development",
      "display_name": "CISA / NSA / NCSC Secure AI System Development",
      "source_pack": "ai_security",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "implementation_reference"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States and United Kingdom",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "binding_obligation", "package_authority"]
    },
    {
      "source_id": "nsa-cisa-fbi-ai-data-security",
      "display_name": "NSA / CISA / FBI AI Data Security",
      "source_pack": "ai_security",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "implementation_reference"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "binding_obligation", "package_authority"]
    },
    {
      "source_id": "cloud-security-alliance-ai-controls-matrix",
      "display_name": "CSA AI Controls Matrix",
      "source_pack": "ai_security",
      "authority_class": "industry_control_catalog",
      "source_role": ["control_catalog", "testable_requirement"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "regulatory_proof", "package_authority"]
    },
    {
      "source_id": "openssf-slsa",
      "display_name": "OpenSSF SLSA",
      "source_pack": "ai_security",
      "authority_class": "engineering_reference",
      "source_role": ["lifecycle_model", "implementation_reference", "testable_requirement"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "regulatory_proof", "package_authority"]
    },
    {
      "source_id": "iso-iec-42001",
      "display_name": "ISO/IEC 42001",
      "source_pack": "ai_governance",
      "authority_class": "official_standard",
      "source_role": ["control_catalog", "testable_requirement", "lifecycle_model"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "iso-iec-23894",
      "display_name": "ISO/IEC 23894",
      "source_pack": "ai_governance",
      "authority_class": "official_standard",
      "source_role": ["risk_framework", "interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "iso-iec-42005",
      "display_name": "ISO/IEC 42005",
      "source_pack": "ai_governance",
      "authority_class": "official_standard",
      "source_role": ["impact_assessment", "interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "iso-iec-5338",
      "display_name": "ISO/IEC 5338",
      "source_pack": "ai_governance",
      "authority_class": "official_standard",
      "source_role": ["lifecycle_model", "implementation_reference"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "eu-ai-act",
      "display_name": "EU AI Act",
      "source_pack": "ai_governance",
      "authority_class": "binding_regulation",
      "source_role": ["obligation", "risk_framework", "impact_assessment"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "European Union",
      "version_label": "final regulation",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "oecd-ai-principles",
      "display_name": "OECD AI Principles",
      "source_pack": "ai_governance",
      "authority_class": "official_framework",
      "source_role": ["risk_framework", "interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "binding_obligation", "package_authority"]
    },
    {
      "source_id": "21-cfr-part-11",
      "display_name": "21 CFR Part 11",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "binding_regulation",
      "source_role": ["obligation", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "current eCFR version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "21-cfr-part-211",
      "display_name": "21 CFR Part 211",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "binding_regulation",
      "source_role": ["obligation", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "current eCFR version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "21-cfr-part-820-qmsr",
      "display_name": "21 CFR Part 820 / QMSR",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "binding_regulation",
      "source_role": ["obligation", "testable_requirement", "lifecycle_model"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "QMSR transition posture to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "fda-part-11-guidance",
      "display_name": "FDA Part 11 Guidance",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "fda-data-integrity-guidance",
      "display_name": "FDA Data Integrity Guidance",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "fda-csa-guidance-version-pinned",
      "display_name": "FDA CSA Guidance, Version-Pinned",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version-pinned before use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "ich-q9-r1",
      "display_name": "ICH Q9(R1)",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "official_standard",
      "source_role": ["risk_framework", "interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "Q9(R1)",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "ich-q10",
      "display_name": "ICH Q10",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "official_standard",
      "source_role": ["lifecycle_model", "interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "Q10",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "eu-annex-11",
      "display_name": "EU Annex 11",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "European Union",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "pic-s-pi-041-1",
      "display_name": "PIC/S PI 041-1",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "PI 041-1",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "ispe-gamp-5",
      "display_name": "ISPE GAMP 5",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "industry_control_catalog",
      "source_role": ["lifecycle_model", "implementation_reference"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "ispe-gamp-ai-guide",
      "display_name": "ISPE GAMP AI Guide",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "industry_control_catalog",
      "source_role": ["implementation_reference", "interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "eu-pic-s-annex-22-draft",
      "display_name": "EU/PIC/S Annex 22 Draft",
      "source_pack": "gxp_regulated_life_sciences",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "not_default",
      "status": "preview_only",
      "lifecycle_status": "draft",
      "jurisdiction": "European Union and PIC/S",
      "version_label": "draft preview",
      "license_mode": "metadata_only",
      "retrieval_mode": "not_retrievable",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["answer_generation", "global_default", "package_authority"]
    },
    {
      "source_id": "fda-cybersecurity-in-medical-devices",
      "display_name": "FDA Cybersecurity in Medical Devices",
      "source_pack": "medical_device_samd",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "fda-ai-ml-samd-pccp-guidance",
      "display_name": "FDA AI/ML SaMD and PCCP Guidance",
      "source_pack": "medical_device_samd",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "lifecycle_model"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "21-cfr-part-820-qmsr-medical-device",
      "display_name": "21 CFR Part 820 / QMSR For Medical Device And SaMD",
      "source_pack": "medical_device_samd",
      "authority_class": "binding_regulation",
      "source_role": ["obligation", "testable_requirement", "lifecycle_model"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "QMSR transition posture to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "iso-14971",
      "display_name": "ISO 14971",
      "source_pack": "medical_device_samd",
      "authority_class": "official_standard",
      "source_role": ["risk_framework", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "iec-62304",
      "display_name": "IEC 62304",
      "source_pack": "medical_device_samd",
      "authority_class": "official_standard",
      "source_role": ["lifecycle_model", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "iec-81001-5-1",
      "display_name": "IEC 81001-5-1",
      "source_pack": "medical_device_samd",
      "authority_class": "official_standard",
      "source_role": ["lifecycle_model", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "nist-sp-800-82-rev-3",
      "display_name": "NIST SP 800-82 Rev. 3",
      "source_pack": "ot_endpoint_infrastructure",
      "authority_class": "official_framework",
      "source_role": ["control_catalog", "implementation_reference"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "Rev. 3",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "nist-csf-2-0-ot-endpoint-infrastructure",
      "display_name": "NIST Cybersecurity Framework 2.0 For OT / Endpoint / Infrastructure",
      "source_pack": "ot_endpoint_infrastructure",
      "authority_class": "official_framework",
      "source_role": ["risk_framework", "control_catalog"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "2.0",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "nist-sp-800-161",
      "display_name": "NIST SP 800-161",
      "source_pack": "ot_endpoint_infrastructure",
      "authority_class": "official_framework",
      "source_role": ["risk_framework", "control_catalog"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "isa-iec-62443",
      "display_name": "ISA/IEC 62443",
      "source_pack": "ot_endpoint_infrastructure",
      "authority_class": "official_standard",
      "source_role": ["control_catalog", "testable_requirement"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "version to be verified against licensed copy",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "cisa-critical-infrastructure-guidance",
      "display_name": "CISA Critical Infrastructure Guidance",
      "source_pack": "ot_endpoint_infrastructure",
      "authority_class": "regulator_guidance",
      "source_role": ["interpretive_guidance", "implementation_reference"],
      "trust_ceiling": "regulatory_or_standard_source_not_package_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "profile_default",
      "status": "profile_default",
      "lifecycle_status": "final",
      "jurisdiction": "United States",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "legal_advice", "package_authority"]
    },
    {
      "source_id": "cis-controls",
      "display_name": "CIS Controls",
      "source_pack": "ot_endpoint_infrastructure",
      "authority_class": "industry_control_catalog",
      "source_role": ["control_catalog", "testable_requirement"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "admin_gated",
      "default_policy": "not_default",
      "status": "licensed_required",
      "lifecycle_status": "final",
      "jurisdiction": "global",
      "version_label": "license-sensitive version to be verified",
      "license_mode": "metadata_only",
      "retrieval_mode": "licensed_or_rights_gated",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "regulatory_proof", "full_text_ingestion_without_rights", "package_authority"]
    },
    {
      "source_id": "anthropic-product-docs",
      "display_name": "Anthropic Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "openai-product-docs",
      "display_name": "OpenAI Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "google-deepmind-gemini-product-docs",
      "display_name": "Google / DeepMind / Gemini Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "microsoft-azure-ai-product-docs",
      "display_name": "Microsoft / Azure AI Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "aws-bedrock-sagemaker-product-docs",
      "display_name": "AWS / Bedrock / SageMaker Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "meta-llama-product-docs",
      "display_name": "Meta / Llama Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "mistral-product-docs",
      "display_name": "Mistral Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "cohere-product-docs",
      "display_name": "Cohere Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "ibm-watsonx-product-docs",
      "display_name": "IBM watsonx Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "nvidia-ai-enterprise-nemo-product-docs",
      "display_name": "NVIDIA AI Enterprise / NeMo Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "hugging-face-product-docs",
      "display_name": "Hugging Face Product Documentation",
      "source_pack": "foundation_model_providers",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "implementation_reference"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "product_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice"]
    },
    {
      "source_id": "langchain-docs",
      "display_name": "LangChain Documentation",
      "source_pack": "agent_rag_engineering",
      "authority_class": "engineering_reference",
      "source_role": ["implementation_reference"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "regulatory_proof", "vendor_neutral_authority_without_independent_support", "package_authority"]
    },
    {
      "source_id": "llamaindex-docs",
      "display_name": "LlamaIndex Documentation",
      "source_pack": "agent_rag_engineering",
      "authority_class": "engineering_reference",
      "source_role": ["implementation_reference"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "version to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "regulatory_proof", "vendor_neutral_authority_without_independent_support", "package_authority"]
    },
    {
      "source_id": "mlcommons-ai-safety-benchmark",
      "display_name": "MLCommons AI Safety Benchmark",
      "source_pack": "independent_evidence",
      "authority_class": "incident_or_benchmark_evidence",
      "source_role": ["incident_evidence", "testable_requirement"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "benchmark version to be pinned before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "package_authority"]
    },
    {
      "source_id": "ai-incident-database",
      "display_name": "AI Incident Database",
      "source_pack": "independent_evidence",
      "authority_class": "incident_or_benchmark_evidence",
      "source_role": ["incident_evidence"],
      "trust_ceiling": "independent_evidence_not_authority",
      "activation_policy": "profile_triggered",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "snapshot version to be pinned before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "package_authority"]
    },
    {
      "source_id": "vendor-system-cards-and-safety-policies",
      "display_name": "Vendor System Cards And Safety Policies",
      "source_pack": "vendor_product_docs",
      "authority_class": "vendor_documentation",
      "source_role": ["product_behavior", "interpretive_guidance"],
      "trust_ceiling": "official_source_for_self",
      "activation_policy": "user_selected",
      "default_policy": "not_default",
      "status": "active_available",
      "lifecycle_status": "unknown",
      "jurisdiction": "global",
      "version_label": "vendor-current metadata to be verified before runtime use",
      "license_mode": "public",
      "retrieval_mode": "owner_approved_runtime_profile_required",
      "browser_fetch_allowed": false,
      "provider_call_allowed": false,
      "package_authority": false,
      "registry_mutable_by_user": false,
      "owner_approval_required": true,
      "marketing_allowed": false,
      "not_useful_for": ["global_default", "compliance_authority", "regulatory_proof", "neutral_cross_vendor_best_practice", "package_authority"]
    }
  ]
}
