Bound to the exact claim
A test result supports a named requirement at a named version, not a build in general. When the requirement moves, the support does not move with it.

This page is written for the reader who has to satisfy an auditor, a regulator or a customer's security review. If you are one developer trying to stop your agent repeating itself, the loop on the product page matters more than this one does.
Evidence that cannot go stale is not evidence. The value is in the expiry, not in the collection.
A test result supports a named requirement at a named version, not a build in general. When the requirement moves, the support does not move with it.
Proof carries the state of the system it was taken against. When that state changes underneath it, confidence drops rather than persisting by default.
A gate that passed records what it evaluated and what it saw. Six months later the question 'why was this allowed' has an answer that is not a reconstruction.
What was approved and what shipped are the same identified artifact, with the path between them retained.
An accepted exception is a record with an owner and a period, not a note in a thread nobody can find.
Agents can move as fast as they like. Production authority is a different thing from implementation throughput and stays that way.
Bring a change that crosses intent, agent implementation and verification. The pilot defines data boundaries, model policy, evidence goals and operating responsibilities before anything else is agreed.