Trust
Make the evidence boundary visible.
A trustworthy engineering report says what ran, against which bytes, in which environment, and what remains pending.
Exact identity
Bind evidence to source/archive fingerprints and invalidate it when decision-critical inputs change.
No false green
Unavailable native, device, store or network evidence stays pending—not PASS.
Fail closed
Missing or conflicting authority should narrow capability rather than silently expand it.
Public claim discipline
Do not advertise a store, price, certification or platform capability until it exists and is verified.