Scope, qualification path and external evidence remain separated from internal controls.
External evidence checkpoints
Monthly availability target, service credits and observed availability evidence are required together.
Provider, report ID, completion date and remediation status are required for verified language.
Processor, cross-border transfer, retention, deletion and return/export must be formally documented.
Baseline, consistent KPI definitions, real samples, evidence hashes, buyer confirmation and independent review are all required.
TP/FP/TN/FN, device health, fail-safe behavior and human review boundaries are verified together.
Specification, pricing, support, exit, security summary and AI responsibility principles are packaged for review.
No unsupported certification, outcome or superiority claim is published.
Architecture and automated verification are strong, while CSAP certification, measured SLA evidence, actual 8–12 week field outcomes, Vision ground truth and independent security review remain external evidence gates. Synthetic data cannot support pilot outcome claims.
Korean and English, customer desktop/mobile, admin desktop/mobile, homepage desktop/mobile, GitHub source and Render production use the same evidence state.