{
  "schema_version": 1,
  "as_of": "2026-10-05",
  "basis": "Repository-visible evidence and operator statements available for this release. This is a self-reported status, not independent assurance.",
  "independent_attestation": {
    "status": "not_established",
    "label": "No independent attestation established",
    "detail": "No completed independent assurance report is provided for this service. No external audit in progress is established by the available evidence."
  },
  "soc2": {
    "status": "not_established",
    "label": "No SOC 2 report established",
    "detail": "No completed SOC 2 Type 1 or Type 2 service-auditor report has been provided."
  },
  "hipaa": {
    "status": "not_established",
    "label": "HIPAA readiness not established",
    "detail": "The repository endpoint has no established HIPAA operational compliance evidence. Do not submit protected health information without a separately reviewed deployment and agreement."
  },
  "baa": {
    "status": "not_established",
    "label": "No BAA established for this service",
    "detail": "No executed business associate agreement has been provided as evidence."
  },
  "gdpr": {
    "status": "not_established",
    "label": "GDPR assurance not established",
    "detail": "No independent GDPR certification or completed operational privacy assessment has been provided. Applicable legal obligations require separate review."
  }
}