[demo:08] evidence · Evidence Room · sha:29b2de8e4054 · build:2026-06-20T23:34:47.545Z

Evidence Room

Receipts and audit artifacts for the governed decision-support demo evidence-room website. Commits, tests, scans, builds, and scope-guard audits.

Every claim on the demo pages resolves to one of these receipts. The evidence room is the canonical audit surface — it proves what was built and verified, not what the system claims about itself.

commit

Commit history — decision-support demo

git log centennialsystems-com (demo pages)

Atomic commits for each demo page and component. Conventional commit format.

test

TypeScript unit tests

lib/__tests__/nv010-e2d-demo.test.ts

Tests for helper functions: shortSha, formatNv010PageMetadata, statusBadge, statusColorClass.

scan

Banned-word scan

scripts/scan-banned-words.mjs

Zero banned marketing words in demo content. Prebuild gate enforces mechanically.

scan

ESLint pass

npm run lint

Zero lint errors across all demo files. TypeScript strict mode, no any types.

commit

Build reproducibility

npm run build

Production build completes. Demo routes are statically generated. Client bundles are deterministic.

scope guard

Scope guard

WRITE_SCOPE audit

Zero writes outside declared WRITE_SCOPE. All 13 files match spec-authorized paths.

scan

Design token compliance

app/globals.css @theme block

All demo pages use existing CDS design tokens. No new colors, fonts, or spacing values introduced.

scope guard

Claims discipline audit

content/nv010-e2d-demo.ts

Every technical claim marked verified/designed-unverified/planned. No unsubstantiated capability claims.

Public source references

  • NIST AI RMF Core (airc.nist.gov)
  • OWASP CycloneDX (owasp.org)
  • WCAG 2.2 (w3.org)
  • USWDS (designsystem.digital.gov)
  • SBA proposal guidance (sbir.gov)

Claims discipline

  • All capability claims tagged: verified, designed-unverified, or planned
  • No “best model” claims — architecture is the thesis
  • Every technical claim cites a receipt, test, or public source
  • No banned marketing words in any demo content file
  • No private evidence, CUI, or ITAR-sensitive material