Research evidence matrix

This matrix concerns the reference itself. It contains no real workbook findings.

Claim	Evidence	State	Limitation
Seed contains 170 controls, 32 scenarios and 71 sources	⁰⁹⁰; reproducible structural count	Confirmed	Counts do not prove correctness
DSIC combines capabilities, standards and assurance	^{072, 080, 095}	Selected primary sources checked	Contract-specific scope remains unknown
Current S25/S30/S24 metadata differs from seed	^{004, 005, 008}; live API revision and hashes	Corrected	No product adoption inferred
DCB manufacturer and deployment duties differ	^{034, 035, 036, 037}	Selected clauses checked	Statutory/contract applicability is separate
A current AIS review stage was omitted	^{050, 076, 077}	Corrected; official search detail	Long-read direct retrieval challenged
Copilot supports attachment-grounded review	^{075, 086, 087, 088, 089}	Documentation checked	Target tenant not tested
Prior local research improves scope	^{091, 092, 093, 094}	Synthesised with provenance	Local notes are not primary authority