Source audit and corrections
Source-verification audit — 28 October 2026
All 71 original source entries were revisited. Inspection depth varies. No audit of every clause, attachment or product requirement is claimed. Metadata inspection, selected-clause verification and actual product evidence are different states. A source marked M in a control does not establish contract adoption or implementation. Source URLs are provenance pointers; Copilot must not treat them as content it has fetched.
| Source | Observed metadata | Inspection depth | Boundary / missing detail |
|---|---|---|---|
| 001 | Capability and Standards Structure | selected-clause-or-topic-check: lifecycle statuses; MUST/MAY Epics; all acceptance criteria; Additional Implementation Details; Supporting Information | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 002 | Standards Assurance | selected-clause-or-topic-check: BAS versus Further Requirements; contracting vehicle; solution category; non-overarching scope | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 003 | Overarching Standards | metadata-and-inventory: index children inventory | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 004 | S25 / 1.0.12 / Effective / 2026-10-19 | selected-clause-or-topic-check: GP-08.4.3.01; GP-MW-2.1-1 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 005 | S30 / 7.0.0 / Effective / 2026-10-23 | selected-clause-or-topic-check: GP-IG-2.3-1; GP-IG-2.3-1A; GP-IG-2.3-2; GP-IG-2.3-3; GP-IG-3-2; GP-IG-3-8; GP-IG-3-17; GP-IG-10-1; GP-IG-10-2; GP-IG-11-1; GP-IG-11-3; GP-IG-11-4; GP-IG-12-1; GP-IG-12-2B; GP-IG-12-3; GP-IG-12-4; GP-IG-12-5; GP-IG-12-7; GP-IG-12-8; GP-IG-12-9; GP-IG-12-10; GP-IG-12-13; GP-IG-13-1; GP-IG-13-2B; GP-IG-13-3; GP-IG-13-4; GP-IG-14.2-2; GP-IG-15.8; GP-IG-14.1-1; GP-IG-14.1-2; GP-IG-14.1-3 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 006 | S27 / 2.0.13 / Effective / 2026-10-19 | selected-clause-or-topic-check: DS01; SCT11; SCT3.7; SCT3.1; GP-REF-2.1.2; GP-REF-2.1.3; GP-REF-2.1.8; GP-03.1-01; MR2.4.01; SCT6; DS03; GP-03.2-09; SCT1; SCT2; SCT8; GP-12.6-01; GP-12.6-02; GP-13-01 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 007 | S26 / 2.1.10 / Effective / 2026-10-19 | selected-clause-or-topic-check: introduction scope/exclusion; DMI01; DMI02; DMI05; DMI06; DMI07; DMI27; DMI26; DMI09; DMI17; DMI18; DMI19; DMI20; DMI21; DMI22; DMI23 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 008 | S24 / 1.2.11 / Effective / 2026-10-19 | selected-clause-or-topic-check: BC-DR-1; BC-DR-16; BC-DR-16A; BC-DR-20 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 009 | S29 / 2.0.10 / Effective / 2026-10-19 | selected-clause-or-topic-check: CH1.0; SEC1.0; hosting boundary | SEC1.0 refers to a separate restricted security document; its clauses remain unreviewed. |
| 010 | S65 / 3.0.11 / Effective / 2026-10-19 | selected-clause-or-topic-check: SM005; SM005a; SM006; SM006a; SM007; SM007a | Referenced service-management and service-level attachment contents not independently reviewed. |
| 011 | S69 / 1.0.12 / Effective / 2026-10-19 | selected-clause-or-topic-check: ISO/IEC/IEEE 29119 reference-point wording; TEST-1; TEST-2; TEST-3; TEST-4; TEST-ENV-1 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 012 | S28 / 1.5.13 / Effective / 2026-10-19 | selected-clause-or-topic-check: TR-1.1; TR-2.1; TR-2.2 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 013 | S32 / 18.2.9 / Effective / 2026-10-23 | selected-clause-or-topic-check: ISNFR01; ISNFR03; ISNFR04; ISNFR06; ISNFR07; ASNFR01; ASNFR02 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 014 | S63 / 2.1.13 / Effective / 2026-10-19 | selected-clause-or-topic-check: introduction answer obligation; GP-NFQ-RS-5; GP-NFQ-RS-3 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 015 | S31 / 2.2.7 / Effective / 2026-10-19 | selected-clause-or-topic-check: introduction; C01 evidence ask; embedded requirement content not extracted | Commercial requirement body uses embedded content; only introduction and evidence-routing were reviewed. |
| 016 | S109 / 1.0.2 / Effective / 2026-08-05 | selected-clause-or-topic-check: ACS001; ACS002; ACS003; ACS004; ACS005 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 017 | S109 / 2.0.0 / Draft / TBC; RM315 / 1.0.1 / Draft / TBC | metadata-and-inventory: Draft/TBC metadata on standard and roadmap | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 018 | C9 / 1.1.1 / Effective / 2026-09-08 | selected-clause-or-topic-check: E00409; E00410; E00411; E00412; E00413; E00418; E00419 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 019 | C13 / 10.0.3 / Effective / 2026-10-13 | selected-clause-or-topic-check: E00163; E00165; E00177 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 020 | C15 / 1.3.1 / Effective / 2026-10-13 | selected-clause-or-topic-check: E00135; E00137; E00138; E00139 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 021 | C14 / 3.0.5 / Effective / 2026-09-16 | selected-clause-or-topic-check: E00092; E00093 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 022 | C11 / 2.1.0 / Effective / 2026-09-22 | selected-clause-or-topic-check: E00148; E00149 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 023 | C5 / 1.5.0 / Effective / 2026-02-26 | selected-clause-or-topic-check: E00219 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 024 | Non-Overarching Standards | metadata-and-inventory: index children inventory | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 025 | R10 / 6.0.1 | selected-clause-or-topic-check: guidance does not supersede mandated standards; foundation capability mapping; dependent standards | Reference guidance only. Individual capabilities and standards control obligations. |
| 026 | S43 / 6.0.2 / Effective / 2026-10-06 | selected-clause-or-topic-check: GP2GP00; GP2GP01; GP2GP02; GP2GP03; GP2GP04; GP2GP05; GP2GP06; GP2GP07; GP2GP08; GP2GP09 | Linked HL7/FHIR specifications, adaptors, attachments and schemas not exhaustively reviewed. |
| 027 | S99 / 1.0.5 / Effective / 2026-10-07 | selected-clause-or-topic-check: GPCARS01; GPCARS02; PDS/Spine dependency | Payload profiles, datasets and all linked service specifications not exhaustively reviewed. |
| 028 | S102 / 1.0.4 / Effective / 2026-10-06 | selected-clause-or-topic-check: GPCUR01; GPCUR02 | Linked sender/receiver ITK3 specifications not independently reviewed. |
| 029 | S36 / 4.0.3 / Effective / 2026-10-23 | selected-clause-or-topic-check: EPSP01; EPSP02; EPSP05 | Linked FHIR/HL7 API specifications and signing package internals not reviewed. |
| 030 | S34 / 1.0.2 / Effective / 2025-12-04 | selected-clause-or-topic-check: DDP03; DDP05; legacy pathology scope | Direct/adaptor boundary inspected; linked message specifications not exhaustively reviewed. |
| 031 | S47 / 2.1.2 / Effective / 2026-10-06 | selected-clause-or-topic-check: IM1 role/type scope; im1_resp_001; im1_auth_001; im1_auth_002; im1_auth_003; im1_auth_004; im1_context_001; im1_context_002 | Supplier-specific schemas, licensed interfaces and local onboarding evidence unavailable. |
| 032 | Page edited 2026-10-16 | direct_scoped | Service introduction, policy and product/onboarding sections inspected; no end-to-end API or supplier assurance audit. |
| 033 | Unversioned live guidance | direct_scoped | Audit/governance/provenance and demographic checks inspected; legacy GPSoC references require adopted interface baseline; JWT detail not audited. |
| 034 | Amd24/2018; publication 2018-06-07 | direct_page | Publication body inspected; review notice does not supersede listed standard. |
| 035 | Amd25/2018; publication 2018-06-07 | direct_page | Publication body inspected; review notice does not supersede listed standard. |
| 036 | Specification v4.2; issue2018-05-02 | direct_scoped | Sections2-7 inspected for seed governance/control summaries. Preserve5.1.2 exception and MUST/SHOULD. Broad grouped rows not atomic requirement coverage. |
| 037 | Specification v3.2; issue2018-05-02 | direct_scoped | Sections2-7 inspected. Preserve5.1.2 exception, top-management acceptance2.2.2 and local customisation7.1.1. No project assurance. |
| 038 | Implementation guidance v3.2;2018-05-02 | direct_scoped | Cover, contents, hazard-log examples and initial/existing-control interpretation inspected; not all61pages. |
| 039 | Implementation guidance v4.2;2018-05-02 | direct_scoped | Cover, contents and selected risk/control/acceptance text inspected; not all60pages. |
| 040 | v2.0;2018-09-27 | direct_scoped | Document control confirmsv2.0; data-type/property tables and guidance purpose inspected. Not whole37page analysis. |
| 041 | Live guidance; no separate edition claimed | direct_scoped | Patient/professional amendment guidance inspected; statement about audit availability is guidance, not product evidence. |
| 042 | Online code; landing edited2026-10-14 | direct_page | Landing page marks PDF out of date. Live retention appendix not yet audited, so no specific retention periods verified. |
| 043 | Keep U03; no verified6.02 baseline | inaccessible_with_search_only_alternative | Exact landing returned JavaScript bot challenge. Different official search result describesv6May2026, ICB Practice Agreementv3.0 and enabling-services templatev6.7; underlying documents uninspected. |
| 044 | 2026revision; former form not used from2026-04-06; edited2026-09-21 | direct_page | Landing body inspected; current downloadable form not inspected. |
| 045 | 2026/27v9;2026-10-02; deadline2027-06-30 | direct_page | Release notice inspected; spreadsheets not read. v1.1 category workbook linked. |
| 046 | Landing updated2023-07-01; linked PDFv1.10g | direct_scoped | Publication page and selected main-PDF content; not all43pages/appendices, classification, CE/UKCA deadlines or future reform. |
| 047 | ICO guidance under DUAA review | direct_scoped | At-a-glance, screening and review notice inspected; detailed linked guidance not audited. |
| 048 | Live NHS guidance | direct_scoped | Definitions and determination sections inspected; detailed scenarios and research guidance not fully audited. |
| 049 | Page edited2019-08-02 | direct_page | Page body inspected; full operational policy exceptions not transcribed. |
| 050 | v4.0;release30/2025;approval2025-06-03;assurance end2027-06-30 | direct_page_plus_search_only_detail | Publication metadata directly inspected. Requirement/implementation detail from official search extracts because direct long-read pages returned bot challenge. |
| 051 | PDFpublished2025-12-19;fullconformance2026-09-30 | direct_page_plus_scoped_pdf | Landing saysAmd24/2025; linked requirements PDF saysAmd41/2025v2.0Final30Nov2025. Metadata/phases/section9 inspected; not all80pages. |
| 052 | v3.1;Amd59/2025;published2025-12-23;fullconformance2026-12-31 | direct_page | Publication body inspected; detailed requirements/proxy attachment uninspected. |
| 053 | v2.01;NHS England ownership from2026-01-01 | direct_scoped | Version/purpose/local views/ownership inspected; spreadsheet,JSON,case and hazard log not inspected. |
| 054 | ICO update2026-06-19 | direct_page | Summary overview says all DUAA data-protection provisions in force; detailed sections/interpretation not fully audited. |
| 055 | Page edited2024-10-11 | direct_page | Documentation body inspected; template downloads/generic workbook not inspected. |
| 056 | C13 / 14.0.0 / Published / 2027-04-20 | metadata-and-inventory: Published/future metadata | Metadata only; future version has not been clause-by-clause compared with effective version. |
| 057 | C14 / 4.0.0 / Published / 2026-12-04 | metadata-and-inventory: Published/future metadata | Metadata only; future version has not been clause-by-clause compared with effective version. |
| 058 | S30 / 6.0.4 / Retired / 2026-10-19 | metadata-and-inventory: Retired metadata | Historical retired reference; not a current baseline. |
| 059 | S108 / 1.0.6 / Effective / 2026-10-19 | selected-clause-or-topic-check: BAS introduction and displayed contracting vehicles | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 060 | C50 / 1.1.0 / Effective / 2026-02-26 | selected-clause-or-topic-check: E00267; E00269; E00270 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 061 | C17 / 1.0.2 / Effective / 2023-05-22 | selected-clause-or-topic-check: E00406; E00407 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 062 | C6 / 1.0.2 / Effective / 2024-02-05 | selected-clause-or-topic-check: E00497; supporting triggers; MAY boundary E00498-E00504 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 063 | C7 / 1.2.0 / Effective / 2026-06-15 | selected-clause-or-topic-check: E00367; MAY channel/communication Epics; additional implementation detail distinction | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 064 | C8 / 1.0.2 / Effective / 2023-05-22 | selected-clause-or-topic-check: E00432; E00433; E00434; MAY boundary; E00431 not found in current canonical text | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 065 | C64 / 2.0.0 / Effective / 2026-05-13 | selected-clause-or-topic-check: MUST/MAY inventory; E00001; E00537; E00779 | Public page vehicle scope is Digital Pathways Solution Registry; not universal GP scope. Selected criteria only. |
| 066 | C4 / 1.2.0 / Effective / 2025-09-19 | selected-clause-or-topic-check: MUST/MAY inventory; E00357-E00360 patient views; E00361-E00364 optional proxy views | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 067 | C39 / 1.0.2 / Effective / 2025-06-04 | selected-clause-or-topic-check: E00736 and source-information criterion; E00737/E00738 optional boundary | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 068 | DSIC Capabilities | metadata-and-inventory: index children inventory | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 069 | ICO guidance under DUAA review | direct_scoped | Core principles and checklists inspected; not all linked security guidance. |
| 070 | ICO guidance under DUAA review | direct_scoped | Main principles and law-versus-guidance distinction inspected; not all subguidance. |
| 071 | Statement2024-09;not substitute for2026/27categorybaseline | direct_scoped | Joint statement core sections inspected; not current organisation-specific assurance evidence. |
| 072 | NHS England: Digital Services for Integrated Care | Source-specific scope in register | Programme scope and framework transition; direct page, 28 October 2026 |
| 073 | NHS England: Clinical system migration guide | Source-specific scope in register | Purpose and planning boundary; landing page only |
| 074 | NHS England: Tech Innovation Framework | Source-specific scope in register | Foundation-EPR route and extension to 30 September 2027; direct page |
| 075 | Microsoft Learn: Copilot requirements | Source-specific scope in register | Required cloud service connectivity;web search configurable;updated22Oct2026; direct_page |
| 076 | NHS England: Accessible Information Standard requirements | Source-specific scope in register | Sixth review stage; direct page bot challenge; official_search_only |
| 077 | NHS England: Accessible Information Standard implementation guidance | Source-specific scope in register | Six steps and electronic review prompts; direct page bot challenge; official_search_only |
| 078 | NHS England: DAPB4019 requirements specification | Source-specific scope in register | Amd41/2025v2.0;metadata,phases,section9; direct_scoped |
| 079 | NHS England: DCB applicability step-by-step guide | Source-specific scope in register | Official applicability guide; linked step-by-step page selected sections; direct_scoped |
| 080 | Introduction to Capabilities and Standards | selected-clause-or-topic-check: MUST/MAY Epics; all acceptance criteria; mandatory Additional Implementation Details; guidance-only Supporting Information | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 081 | Capability and Standards Overview | selected-clause-or-topic-check: historical six-foundation capability list; obsolete classification not adopted | Buyer guidance last updated 2020; historical context. Use current 001/080 for present classification. |
| 082 | C12 / 1.0.3 / Effective / 2024-11-13 | selected-clause-or-topic-check: E00153; E00154 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. |
| 083 | UK legislation: SI 2025/807 regulation 3 | Source-specific scope in register | Regulations 2-3 and explanatory note inspected: old statutory framework saved for standards effective before 7 July 2025; no blanket private/Defence exemption inferred; direct_scoped |
| 084 | UK legislation: SI 2025/950 regulation 6 | Source-specific scope in register | Procedure regulations read; regulation6 published notice fields and 6 August2025 commencement confirmed; direct_full_document |
| 085 | NHS GP Connect: Clinical safety principles | Source-specific scope in register | Selected safety roles; guide displays active review and release TBC |
| 086 | Microsoft Support: File upload in Copilot | Source-specific scope in register | Markdown and Excel supported; tenant-dependent extraction must be checked |
| 087 | Microsoft Support: Information used to answer prompts | Source-specific scope in register | Attachment grounding and explicit source selection; direct page |
| 088 | Microsoft Support: Write a great prompt | Source-specific scope in register | Goal, context, source and expectations; direct page |
| 089 | Microsoft Learn: Managing public web access | Source-specific scope in register | Web search is optional and separately controlled; direct page |
| 090 | User-supplied ChatGPT research reference v1.0 | Source-specific scope in register | Seed only; not independent normative authority; preserved SHA-256 f6413605e681afdfe029fb80fbb2cafaeacc3784da93bb1ea181c15da5b78197 |
| 091 | Local InterSystems knowledge base | Source-specific scope in register | DSIC taxonomy and crosswalk leads; current primary-source reconciliation; local provenance manifest |
| 092 | Local COPPER TIGER knowledge base | Source-specific scope in register | DSIC, procurement and NHS–Defence evidence-boundary synthesis; local provenance manifest |
| 093 | Local UK Digital Health compliance knowledge base | Source-specific scope in register | DCB applicability and equivalent-baseline concepts; legislation rechecked; local provenance manifest |
| 094 | Local DShCR knowledge base | Source-specific scope in register | GP Connect role, safety and onboarding synthesis; local provenance manifest |
| 095 | NHS England: Capabilities, epics and standards | Source-specific scope in register | Current buyer page; six foundation capabilities and BAS; checked 28 October 2026 |
Change record — version 1.1
The original file remains unchanged. These changes apply to the recreated reference.
| Change | Reason |
|---|---|
| C01 | Live canonical API metadata supersedes stale web extraction. |
| C02 | Live canonical API body updated 26 October 2026 establishes current metadata; adopted product baseline remains unknown. |
| C03 | Live canonical metadata. |
| C04 | Separates resolved source metadata from unresolved product applicability. |
| C05 | Live canonical API resolves U02 cache conflict. |
| C06 | Removes stale uncertainty and preserves adopted-version boundary. |
| C07 | Prior-version IDs are absent from current v7; revised clauses cover NHS routes, assurance and elevation. |
| C08 | Avoids implying the optional mechanism GP-IG-13-2B is MUST. |
| C09 | Current metadata verified. |
| C10 | Current metadata verified. |
| C11 | Source register correction. |
| C12 | Source register correction. |
| C13 | Source register correction. |
| C14 | Source register correction. |
| C15 | Adds essential hierarchy omitted by seed without treating all example text as normative. |
| C16 | Grouped M row includes qualified recommendations and a risk-control exception. |
| C17 | Retains mandatory duties while exposing the exception and conditional benefit-analysis trigger. |
| C18 | Section 6.3 applies subject to 5.1.2 and responsibilities assigned to other organisations. |
| C19 | Explicit broad-row qualification avoids an unconditional downgrade or elevation of its clauses. |
| C20 | Audit scope and examples depend on the adopted GP Connect interface and role; source contains legacy references. |
| C21 | The 2025 AIS update adds Review as the sixth stage; detailed long-read evidence was official-search-only. |
| C22 | Separates local and national phases; absent API is not proof of absent national implementation. |
| C23 | Original precise version cannot be presented as reconfirmed; preserve the uncertainty once consistently. |
| C24 | Resolved the linked specification identity and deadline while retaining landing-page disagreement. |
| C25 | Do not present obsolete downloadable PDF as the current offline retention schedule. |
| C26 | Avoid describing the entire DUAA as a future change. |
| C27 | The former property list was only a selection; make the breadth and non-normative status clear. |
| C28 | Replace unsupported precision with the actual inspection limit. |
| C29 | Partly resolves the original uncertainty instead of duplicating stale and current accounts. |
| C30 | Demonstrated failure of a process/documentary obligation also qualifies; silence does not. |
| C31 | Separates concern domain from proof strength. |
| C32 | An unavailable evidence item is not automatically a proven nonclinical breach. |
| C33 | Consistent two-dimensional finding rule without weakening genuine process obligations. |
| C34 | M is an obligation basis, not a claim that every grouped clause was independently reverified. |
| C35 | Remove the embedded prompt's implied universal verification claim. |
| C36 | Reflect the user-confirmed configuration and no-memory-fallback rule. |
| C37 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C38 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C39 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C40 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C41 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C42 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C43 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C44 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C45 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C46 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C47 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C48 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C49 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C50 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C51 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C52 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C53 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C54 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C55 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C56 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C57 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C58 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C59 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C60 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C61 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C62 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
| C63 | Source register now states actual retrieval depth and boundaries from safety-sources.json. |
Additional changes: current DSIC concept explanation; local knowledge-base synthesis; separate source-verification state; confirmed Copilot service/web-disabled context; retrieval checks; batch, challenge and continuation prompts. New control identifiers are additive; original GP and H identifiers remain stable.