Public review index
Policy and evidence, with the edges left visible.
A reviewer-facing map of the requested artifacts, their evidence date, and the owner or legal-review work still required. A record here is not a pass, certification, deployment attestation, or approval.
Package boundary
2026-08-29
Redacted repository evidence and owner/platform requests. The underlying private register is not published here.
See how these records fit into the dated security-evidence pillar.
Security evidence indexHow to read this page
A record is not a conclusion.
Missing public copies are named rather than implied. Where a card links out, the destination is existing public context only—not a substitute for the requested artifact.
Date
Every record carries both its publication date and source evidence date.
Ownership
Proposed reviewers and pending owner actions stay explicit.
Legal review
Draft policy language is not presented as counsel-approved.
Artifact register
Policy documents and supporting evidence
Dates, status, and review boundaries stay visible on every record. Evidence-backed never means approved.
Draft confirmation notice
All five policy documents below are public working drafts. Their language remains subject to owner confirmation and, where applicable, legal review; publication does not make a document final, approved, or an executed agreement.
The private evidence register contains repository-internal links and is not a public download. Contact Latchstead for questions about owner-supplied evidence, legal review, or a future public copy.
Review vendors & sub-processors