{
  "id": "glossary-citation-audit",
  "schema_version": "1.0",
  "version": "1.1.0-citation-review-1",
  "published": "2026-10-09",
  "updated": "2026-10-14",
  "last_reviewed": null,
  "canonical_url": "https://syntheticforensics.org/data/glossary-citation-audit.json",
  "license": "CC-BY-4.0",
  "items": [
    {
      "term_id": "account-attribution",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#account-attribution"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "limitation": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.4.4: attacker identification and limitations",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Identity resolution and verification",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "account-takeover",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#account-takeover"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "limitation": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "references": [
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Authenticator types; authentication processes; §5: session management",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Enrollment and subscriber accounts",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "acquisition",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#acquisition"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Collection scope, source identification, and documented acquisition.",
      "limitation": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "acquisition-log",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#acquisition-log"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Collection scope, source identification, and documented acquisition.",
      "limitation": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "agent",
      "original_references": [
        "mcp"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#agent"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Agent actions and structured tool interfaces provide context.",
      "limitation": "Not every agent uses MCP, and a function schema is not proof of execution.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "limited-context",
          "locator": "Agent and action space",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "limited-context",
          "locator": "Tools: tool definitions, inputSchema, and invocation",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "agent-forensics",
      "original_references": [
        "mcp"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#agent-forensics"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "agent-task",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#agent-task"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Agent actions and structured tool interfaces provide context.",
      "limitation": "Not every agent uses MCP, and a function schema is not proof of execution.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "limited-context",
          "locator": "Agent and action space",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "limited-context",
          "locator": "Tools: tool definitions, inputSchema, and invocation",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "ai-anti-forensics",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#ai-anti-forensics"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "ai-artifact",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#ai-artifact"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "ai-evidence",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#ai-evidence"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "ai-provenance",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#ai-provenance"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "General lineage relationships support recording origins and changes.",
      "limitation": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "limited-context",
          "locator": "§2 and §5.2: provenance relationships and derivation",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "api-audit-event",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#api-audit-event"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Records can describe requests, actor context, timing, and outcomes.",
      "limitation": "API payloads and agent traces vary by implementation, and the record set may be incomplete or alterable.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "AU-3: record content; AU-12: audit-record generation",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.3: application logs",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "approval-event",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#approval-event"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "limitation": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "artifact",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#artifact"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Distinguishing examined data from analysis and documenting consequential handling.",
      "limitation": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.2–3.4: examination, analysis, and reporting",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "assertion",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#assertion"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Protected provenance assertions and the structure that references them.",
      "limitation": "Validation of an assertion is distinct from factual truth and completeness.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§6: assertions; §10: claims; §1.2: scope",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "assistant-response",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#assistant-response"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Role-labeled messages can be serialized into model input through templates.",
      "limitation": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "references": [
        {
          "id": "hfChat",
          "title": "Transformers — Chat templates",
          "url": "https://huggingface.co/docs/transformers/en/chat_templating",
          "category": "P",
          "role": "limited-context",
          "locator": "Role/content messages and serialized chat templates",
          "scope": "Role/content messages and conversion to a model’s serialized input. This does not document a universal conversation export or revision graph.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "asynchronous-operation",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#asynchronous-operation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Acceptance/dispatch and later completion can be distinct events.",
      "limitation": "The actual tool’s lifecycle and persistence guarantees must be established separately.",
      "references": [
        {
          "id": "httpSemantics",
          "title": "RFC 9110 — HTTP Semantics",
          "url": "https://www.rfc-editor.org/rfc/rfc9110.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§15.3.3: 202 Accepted",
          "scope": "Sections 6, 8, 9.2.2, and 15.3.3 cover messages, representations, idempotency, retries, and accepted requests. HTTP semantics do not guarantee every agent tool has the same behavior.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "pythonAsync",
          "title": "Python — Coroutines and Tasks",
          "url": "https://docs.python.org/3/library/asyncio-task.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Task completion and awaiting",
          "scope": "Dispatch, awaiting, task completion, cancellation, and asynchronous processing in asyncio. Not a universal agent-execution model.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "attachment",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#attachment"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "attribution",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#attribution"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "limitation": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.4.4: attacker identification and limitations",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Identity resolution and verification",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "audio-spoofing",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#audio-spoofing"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Replay, synthesis, and conversion are distinct speech-spoofing conditions.",
      "limitation": "The evaluated recordings and simulated replay conditions do not establish how a case recording was created.",
      "references": [
        {
          "id": "asvSpoofResearch",
          "title": "ASVspoof 2019: A large-scale public database of synthesized, converted and replayed speech (Wang et al.)",
          "url": "https://arxiv.org/abs/1911.01601",
          "category": "R",
          "role": "core-concept",
          "locator": "Database design: logical and physical access scenarios",
          "scope": "Defined speech synthesis, conversion, and replay conditions for speaker-verification spoofing evaluation. Does not identify an operator or validate every case recording.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "audio-synthesis",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#audio-synthesis"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "limitation": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "references": [
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "core-concept",
          "locator": "Technical approaches: detection, watermarking, and provenance",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "audit-trail",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#audit-trail"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Records can describe requests, actor context, timing, and outcomes.",
      "limitation": "API payloads and agent traces vary by implementation, and the record set may be incomplete or alterable.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "AU-3: record content; AU-12: audit-record generation",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.3: application logs",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "authentication-event",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#authentication-event"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "limitation": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "references": [
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Authenticator types; authentication processes; §5: session management",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Enrollment and subscriber accounts",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "authenticity",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#authenticity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Integrity/trust evaluation is bounded to recorded assertions and their association with content.",
      "limitation": "The proposition-based authenticity definition is editorial and extends beyond C2PA validation.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "limited-context",
          "locator": "§1.2: scope; §14: trust model",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "authenticity-calibration",
      "original_references": [
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#authenticity-calibration"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General source-memory theory supplies background only.",
      "limitation": "These operational/working concepts are project editorial formulations; no established diagnosis, measured AI effect, or validated instrument is asserted.",
      "references": [
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "editorial-background",
          "locator": "Source-monitoring framework",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "authorization-context",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#authorization-context"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "limitation": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "automation-bias",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#automation-bias"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Reliance on automated guidance is studied under defined task conditions.",
      "limitation": "No AI-specific effect or finding about an individual user is established by this report.",
      "references": [
        {
          "id": "automationBiasResearch",
          "title": "Automation: Decision Aid or Decision Maker? (Skitka)",
          "url": "https://ntrs.nasa.gov/api/citations/19980048379/downloads/19980048379.pdf",
          "category": "R",
          "role": "core-concept",
          "locator": "Decision-aid reliance and task experiments",
          "scope": "Studies of reliance on automated decision aids in defined tasks. Not evidence that a particular person or AI user exhibits the effect.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "base-model",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#base-model"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "benchmark",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#benchmark"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Evaluation populations and changed data conditions can affect measured performance.",
      "limitation": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "references": [
        {
          "id": "distributionResearch",
          "title": "WILDS: A Benchmark of in-the-Wild Distribution Shifts (Koh et al., 2021)",
          "url": "https://proceedings.mlr.press/v139/koh21a.html",
          "category": "R",
          "role": "core-concept",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations",
          "scope": "Benchmark design and performance under specified real-world distribution shifts. The datasets do not establish performance for AI artifact attribution.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "biometric-comparison",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#biometric-comparison"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Claimed identities and defined checks against supplied evidence or presentations.",
      "limitation": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "references": [
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Identity proofing, validation, verification, and biometrics",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.2.3: biometrics and presentation attacks",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "bit-depth",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#bit-depth"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Sample bit depth and lossless PNG representation.",
      "limitation": "The underlying signal, model precision, and other formats require their own semantics.",
      "references": [
        {
          "id": "pngSpec",
          "title": "PNG Specification — Third Edition",
          "url": "https://www.w3.org/TR/png/",
          "category": "P",
          "role": "core-concept",
          "locator": "Definitions; sample representation; image data encoding",
          "scope": "Bit depth, samples, lossless encoding, file signature, and metadata chunks in PNG. Does not determine AI origin.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "bitstream-image",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#bitstream-image"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Imaging, retained source evidence, working copies, and recorded handling.",
      "limitation": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "branch",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#branch"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "browser-history",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#browser-history"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Browser/application retention, navigation records, and storage lifetime.",
      "limitation": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.3: logs; §7.2.2: web usage",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "storageSpec",
          "title": "Storage Standard",
          "url": "https://storage.spec.whatwg.org/",
          "category": "P",
          "role": "limited-context",
          "locator": "Persistence and storage clearing",
          "scope": "Storage keys, persistence, and storage endpoints in the living specification. Persistence of particular evidence depends on the application and browser.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "browser-storage",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#browser-storage"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Multiple browser storage mechanisms with defined scope and lifetime rules.",
      "limitation": "A storage API does not demonstrate that a particular application retains messages there.",
      "references": [
        {
          "id": "storageSpec",
          "title": "Storage Standard",
          "url": "https://storage.spec.whatwg.org/",
          "category": "P",
          "role": "core-concept",
          "locator": "Storage endpoints, storage keys, and persistence",
          "scope": "Storage keys, persistence, and storage endpoints in the living specification. Persistence of particular evidence depends on the application and browser.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "c2pa",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#c2pa"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "C2PA provenance structures and associated content records.",
      "limitation": "Validation does not establish factual truth, full history, or consent.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§2.3: core terms; §10–11: claims and manifests",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "c2pa-claim",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#c2pa-claim"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Protected provenance assertions and the structure that references them.",
      "limitation": "Validation of an assertion is distinct from factual truth and completeness.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§6: assertions; §10: claims; §1.2: scope",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "c2pa-ingredient",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#c2pa-ingredient"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "An input asset represented in a C2PA provenance relationship.",
      "limitation": "An ingredient reference does not by itself recover or verify every earlier input.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§18.16: ingredient assertions",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "c2pa-manifest",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#c2pa-manifest"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "C2PA provenance structures and associated content records.",
      "limitation": "Validation does not establish factual truth, full history, or consent.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§2.3: core terms; §10–11: claims and manifests",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "cache",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#cache"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Browser/application retention, navigation records, and storage lifetime.",
      "limitation": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.3: logs; §7.2.2: web usage",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "storageSpec",
          "title": "Storage Standard",
          "url": "https://storage.spec.whatwg.org/",
          "category": "P",
          "role": "limited-context",
          "locator": "Persistence and storage clearing",
          "scope": "Storage keys, persistence, and storage endpoints in the living specification. Persistence of particular evidence depends on the application and browser.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "calibration",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#calibration"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Agreement between reported confidence and observed correctness under an evaluation.",
      "limitation": "The classification study does not calibrate a particular forensic detector or a person’s confidence.",
      "references": [
        {
          "id": "calibrationResearch",
          "title": "On Calibration of Modern Neural Networks (Guo et al., 2017)",
          "url": "https://proceedings.mlr.press/v70/guo17a.html",
          "category": "R",
          "role": "core-concept",
          "locator": "Confidence calibration problem and evaluated methods",
          "scope": "Confidence calibration evaluated on image and document classification models. Methodological background, not validation of a particular forensic detector or attribution result.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "canonicalization",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#canonicalization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A defined representation can support reproducible signing or comparison.",
      "limitation": "JCS is one scheme; applying it to another format without its rules is unsupported.",
      "references": [
        {
          "id": "jcs",
          "title": "RFC 8785 — JSON Canonicalization Scheme",
          "url": "https://www.rfc-editor.org/rfc/rfc8785.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§3: deterministic JSON representation",
          "scope": "Section 3 describes one specific JSON canonicalization scheme. Other signature or comparison formats require their own rules.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "certificate",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#certificate"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "limitation": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "references": [
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "certificate-chain",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#certificate-chain"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "limitation": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "references": [
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "chain-of-custody",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#chain-of-custody"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Imaging, retained source evidence, working copies, and recorded handling.",
      "limitation": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "cloud-export",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#cloud-export"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "codec",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#codec"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The distinction between streams’ encoding methods and their containing formats.",
      "limitation": "Format recognition alone does not validate a whole file or identify its source.",
      "references": [
        {
          "id": "mediaFormats",
          "title": "Media container formats",
          "url": "https://developer.mozilla.org/en-US/docs/Web/Media/Guides/Formats/Containers",
          "category": "P",
          "role": "core-concept",
          "locator": "Container formats and codecs",
          "scope": "Containers and the distinction between container and codec. Individual file completeness requires examination.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "collection-scope",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#collection-scope"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Collection scope, source identification, and documented acquisition.",
      "limitation": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "command-execution",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#command-execution"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Process invocation and distinct outcome/output representations.",
      "limitation": "Process success can be narrower than the intended application or external-system effect.",
      "references": [
        {
          "id": "pythonProcess",
          "title": "Python — subprocess management",
          "url": "https://docs.python.org/3/library/subprocess.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Popen; returncode; stdout; stderr",
          "scope": "Process invocation, return codes, and standard output/error streams in the documented API. A zero return code is not independent proof of a destination effect.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "competing-hypothesis",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#competing-hypothesis"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "limitation": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "completion-status",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#completion-status"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Documented generation controls and output delivery behavior.",
      "limitation": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "references": [
        {
          "id": "hfGeneration",
          "title": "Transformers — GenerationConfig and generation",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/text_generation",
          "category": "P",
          "role": "core-concept",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers",
          "scope": "Documented temperature, top-p, stopping, generation configuration, and streaming interfaces. These semantics apply to the documented implementation, not every hosted service.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "concept-drift",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#concept-drift"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A predictive relationship can change over time and be examined through conditional-distribution comparisons.",
      "limitation": "The study’s metric does not establish a universal drift detector or identify the cause of a case-specific change.",
      "references": [
        {
          "id": "conceptDriftResearch",
          "title": "Measuring the Discrepancy between Conditional Distributions: Methods, Properties and Applications (Yu et al.)",
          "url": "https://arxiv.org/abs/2005.02196",
          "category": "R",
          "role": "core-concept",
          "locator": "Conditional-distribution discrepancies and concept-drift application",
          "scope": "Conditional-distribution comparisons and a concept-drift-detection application. A measured discrepancy does not establish its cause in a deployed model.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "confabulation",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#confabulation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "A generative AI risk involving confidently expressed erroneous content.",
      "limitation": "The glossary’s broad usage is context dependent; this is not a human clinical diagnosis or proof of deception.",
      "references": [
        {
          "id": "nistGenAI",
          "title": "NIST AI 600-1 — Generative AI Profile",
          "url": "https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§2.2: confabulation",
          "scope": "July 2024 profile, including confabulation and information-integrity risks. AI-risk terminology is not a clinical diagnosis or a validated forensic interpretation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "confidence-statement",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#confidence-statement"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "limitation": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "confusion-matrix",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#confusion-matrix"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "content-address",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#content-address"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A content identifier depends on hashing and representation.",
      "limitation": "An IPFS CID need not equal the SHA-256 digest of the raw file; it does not authenticate a source.",
      "references": [
        {
          "id": "ipfsCids",
          "title": "IPFS — Content addressing",
          "url": "https://docs.ipfs.tech/concepts/content-addressing/",
          "category": "P",
          "role": "core-concept",
          "locator": "Content identifiers and content addressing",
          "scope": "Content identifiers, representation, and hashing in IPFS. A CID does not necessarily equal a raw-file SHA-256 digest.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "content-credentials",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#content-credentials"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "C2PA provenance structures and associated content records.",
      "limitation": "Validation does not establish factual truth, full history, or consent.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§2.3: core terms; §10–11: claims and manifests",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "content-provenance",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#content-provenance"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "limitation": "A provenance description is not independent proof that each relationship occurred.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "context-summarization",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#context-summarization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Bounded inputs provide context for application-defined summaries.",
      "limitation": "The source does not establish a universal summarization algorithm or the text supplied to a particular run.",
      "references": [
        {
          "id": "hfTokenizer",
          "title": "Transformers — Tokenizer",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/tokenizer",
          "category": "P",
          "role": "limited-context",
          "locator": "Input length and truncation",
          "scope": "Tokenization, encoding, truncation, and maximum input lengths in the documented tokenizer API. Case-specific tokenizer and context must still be identified.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "hfChat",
          "title": "Transformers — Chat templates",
          "url": "https://huggingface.co/docs/transformers/en/chat_templating",
          "category": "P",
          "role": "limited-context",
          "locator": "Serialized conversational input",
          "scope": "Role/content messages and conversion to a model’s serialized input. This does not document a universal conversation export or revision graph.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "context-truncation",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#context-truncation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Tokenizer units and configured input-length/truncation behavior.",
      "limitation": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "references": [
        {
          "id": "hfTokenizer",
          "title": "Transformers — Tokenizer",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/tokenizer",
          "category": "P",
          "role": "core-concept",
          "locator": "Encoding, truncation, padding, and model_max_length",
          "scope": "Tokenization, encoding, truncation, and maximum input lengths in the documented tokenizer API. Case-specific tokenizer and context must still be identified.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "context-window",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#context-window"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Tokenizer units and configured input-length/truncation behavior.",
      "limitation": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "references": [
        {
          "id": "hfTokenizer",
          "title": "Transformers — Tokenizer",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/tokenizer",
          "category": "P",
          "role": "core-concept",
          "locator": "Encoding, truncation, padding, and model_max_length",
          "scope": "Tokenization, encoding, truncation, and maximum input lengths in the documented tokenizer API. Case-specific tokenizer and context must still be identified.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "conversation-branch",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#conversation-branch"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "conversation-export",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#conversation-export"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "conversation-graph",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#conversation-graph"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "cookie",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#cookie"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Cookie storage and request association under domain/path/attribute rules.",
      "limitation": "A cookie or session credential does not establish human identity.",
      "references": [
        {
          "id": "httpCookies",
          "title": "RFC 6265 — HTTP State Management Mechanism",
          "url": "https://httpwg.org/specs/rfc6265.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1.2: cookie attributes; §5.3: storage model",
          "scope": "Sections 4–5 cover cookie attributes and storage/request processing. A cookie identifies state under protocol rules; it does not identify a human operator.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "correlation",
      "original_references": [
        "mcp"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#correlation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "limitation": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "corroboration",
      "original_references": [
        "mcp"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#corroboration"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "limitation": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "credential-verification",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#credential-verification"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "limitation": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "references": [
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Authenticator types; authentication processes; §5: session management",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Enrollment and subscriber accounts",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "cryptographic-signature",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#cryptographic-signature"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Keys, signatures, and the certificate assertions used during verification.",
      "limitation": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "references": [
        {
          "id": "digitalSignatures",
          "title": "FIPS 186-5 — Digital Signature Standard",
          "url": "https://csrc.nist.gov/pubs/fips/186-5/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 186-5: signature generation and verification",
          "scope": "Digital signature generation and verification. A valid signature is not proof that a signed statement describes a true event.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1: certificate and subject public-key information",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "custody-transfer",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#custody-transfer"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Imaging, retained source evidence, working copies, and recorded handling.",
      "limitation": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "data-leakage",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#data-leakage"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Information crossing a training/evaluation boundary can invalidate an evaluation claim.",
      "limitation": "Determining leakage in a particular corpus requires its actual collection and transformation records.",
      "references": [
        {
          "id": "sklearnPitfalls",
          "title": "Common pitfalls and recommended practices",
          "url": "https://scikit-learn.org/stable/common_pitfalls.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Data leakage",
          "scope": "Data leakage and separation of training/test information. Not proof that a particular benchmark or case comparison is uncontaminated.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "data-minimization",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#data-minimization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Purpose-bounded processing and controlled disclosure/retention of information.",
      "limitation": "The project’s evidence-report redaction practice is an editorial application, not a universal legal rule.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "PT-3: processing purposes; SI-12: information management",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "database-checkpoint",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#database-checkpoint"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Committed SQLite changes in a WAL and their transfer during checkpointing.",
      "limitation": "Evidence significance depends on acquisition consistency and the actual application configuration.",
      "references": [
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§2: how WAL works; §2.1: checkpointing",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "database-journal",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#database-journal"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "A concrete transactional journal implementation and its relationship to database state.",
      "limitation": "Journaling varies by engine; SQLite behavior does not define every database journal.",
      "references": [
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "limited-context",
          "locator": "WAL overview and checkpointing",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.4: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "dataset-provenance",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#dataset-provenance"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Dataset-source and processing documentation with stated scope.",
      "limitation": "A dataset document can contain unverified assertions or omit history.",
      "references": [
        {
          "id": "datasetSheets",
          "title": "Datasheets for Datasets (Gebru et al.)",
          "url": "https://arxiv.org/abs/1803.09010",
          "category": "R",
          "role": "core-concept",
          "locator": "Datasheet questions: composition, collection, processing, uses, and maintenance",
          "scope": "Dataset documentation concerning collection, composition, processing, uses, and maintenance. A datasheet is an assertion, not independent verification.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "deduplication",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#deduplication"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Byte comparisons can identify repeated representations under a stated rule.",
      "limitation": "Similarity-based consolidation and evidence-source independence require separate criteria.",
      "references": [
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "limited-context",
          "locator": "FIPS 180-4: digests",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.3.1: comparing and locating files",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "deepfake",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#deepfake"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "limitation": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "references": [
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "core-concept",
          "locator": "Technical approaches: detection, watermarking, and provenance",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "delegation",
      "original_references": [
        "mcp"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#delegation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "delegation-chain",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#delegation-chain"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "deleted-record",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#deleted-record"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Allocated slack, unallocated regions, and residual file data.",
      "limitation": "Logical application deletion and physical recovery are separate; recovery is not guaranteed.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1.2–4.1.3: filesystems, free space, slack, and residual data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "deployment-identifier",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#deployment-identifier"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Configuration and inference artifacts can help distinguish deployment states.",
      "limitation": "Endpoint aliases, labels, routing, and historical runtime identity need independently acquired records.",
      "references": [
        {
          "id": "hfConfig",
          "title": "Transformers — Configuration",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/configuration",
          "category": "P",
          "role": "limited-context",
          "locator": "Model configuration",
          "scope": "Model configuration objects and configuration serialization. A label or configuration file does not prove historical endpoint routing.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "pytorchCheckpoint",
          "title": "PyTorch — Saving and Loading Models",
          "url": "https://docs.pytorch.org/tutorials/beginner/saving_loading_models.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Saving and loading for inference",
          "scope": "State dictionaries, parameter tensors, checkpoints, and inference loading. Not evidence of a particular deployment’s training history or identity.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "derivation",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#derivation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Relationships between a source entity and derived or revised entities.",
      "limitation": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.2: derivation, revision, quotation, and primary source",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "derived-evidence",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#derived-evidence"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Relationships between a source entity and derived or revised entities.",
      "limitation": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.2: derivation, revision, quotation, and primary source",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "detection-threshold",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#detection-threshold"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "developer-instruction",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#developer-instruction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Role-labeled messages can be serialized into model input through templates.",
      "limitation": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "references": [
        {
          "id": "hfChat",
          "title": "Transformers — Chat templates",
          "url": "https://huggingface.co/docs/transformers/en/chat_templating",
          "category": "P",
          "role": "limited-context",
          "locator": "Role/content messages and serialized chat templates",
          "scope": "Role/content messages and conversion to a model’s serialized input. This does not document a universal conversation export or revision graph.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "diffusion-model",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#diffusion-model"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A specified iterative diffusion generation and sampling procedure.",
      "limitation": "Sampler names and step parameters vary across implementations; reproduction of a historical result is not guaranteed.",
      "references": [
        {
          "id": "diffusionResearch",
          "title": "Denoising Diffusion Probabilistic Models (Ho et al., 2020)",
          "url": "https://arxiv.org/abs/2006.11239",
          "category": "R",
          "role": "core-concept",
          "locator": "§2–3: diffusion and reverse-process sampling",
          "scope": "The paper’s denoising diffusion model and sampling process. It does not identify which generator produced a case object.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "digital-evidence",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#digital-evidence"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Data examined with preservation, integrity, and a stated investigative purpose.",
      "limitation": "The project’s proposition-based phrasing is editorial; the source is IT-oriented guidance, not legal admissibility advice.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§2.1: digital forensics; Appendix B: data and forensic terminology",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "digital-persona",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#digital-persona"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "Identity construction and proofing supply background for the project’s broader representation terminology.",
      "limitation": "The established fraud definition includes dishonest gain; it does not classify every fictional or AI-generated persona as fraud.",
      "references": [
        {
          "id": "syntheticIdentityFraud",
          "title": "Synthetic Identity Fraud Defined",
          "url": "https://fedpaymentsimprovement.org/strategic-initiatives/payments-security/synthetic-identity-payments-fraud/synthetic-identity-fraud-defined/",
          "category": "P",
          "role": "editorial-background",
          "locator": "Defining the Problem of Synthetic Identity Fraud",
          "scope": "A voluntary industry definition of fabricated identities used for dishonest gain. Its fraud meaning is narrower than all AI-generated identity representations.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "editorial-background",
          "locator": "Identity resolution and identity evidence",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "digital-provenance",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#digital-provenance"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "limitation": "A provenance description is not independent proof that each relationship occurred.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "disk-image",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#disk-image"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Imaging, retained source evidence, working copies, and recorded handling.",
      "limitation": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "distribution-shift",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#distribution-shift"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Evaluation populations and changed data conditions can affect measured performance.",
      "limitation": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "references": [
        {
          "id": "distributionResearch",
          "title": "WILDS: A Benchmark of in-the-Wild Distribution Shifts (Koh et al., 2021)",
          "url": "https://proceedings.mlr.press/v139/koh21a.html",
          "category": "R",
          "role": "core-concept",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations",
          "scope": "Benchmark design and performance under specified real-world distribution shifts. The datasets do not establish performance for AI artifact attribution.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "domain-shift",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#domain-shift"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Evaluation populations and changed data conditions can affect measured performance.",
      "limitation": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "references": [
        {
          "id": "distributionResearch",
          "title": "WILDS: A Benchmark of in-the-Wild Distribution Shifts (Koh et al., 2021)",
          "url": "https://proceedings.mlr.press/v139/koh21a.html",
          "category": "R",
          "role": "core-concept",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations",
          "scope": "Benchmark design and performance under specified real-world distribution shifts. The datasets do not establish performance for AI artifact attribution.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "email-verification",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#email-verification"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "limitation": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "references": [
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Authenticator types; authentication processes; §5: session management",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Enrollment and subscriber accounts",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "embedded-manifest",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#embedded-manifest"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "C2PA provenance structures and associated content records.",
      "limitation": "Validation does not establish factual truth, full history, or consent.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§2.3: core terms; §10–11: claims and manifests",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "embedding",
      "original_references": [
        "aiRmf"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#embedding"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Language sequences and numerical representations have documented model contexts.",
      "limitation": "A Transformer paper is not a complete definition of every LLM or multimodal deployment.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "limited-context",
          "locator": "Named entries: large language model, multimodal, embedding",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "transformerResearch",
          "title": "Attention Is All You Need (Vaswani et al., 2017)",
          "url": "https://arxiv.org/abs/1706.03762",
          "category": "R",
          "role": "limited-context",
          "locator": "§3: model architecture and embeddings",
          "scope": "Transformer attention and sequence representation in the studied architecture. Not a definition of all modern deployments.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "evaluation-dataset",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#evaluation-dataset"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Evaluation populations and changed data conditions can affect measured performance.",
      "limitation": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "references": [
        {
          "id": "distributionResearch",
          "title": "WILDS: A Benchmark of in-the-Wild Distribution Shifts (Koh et al., 2021)",
          "url": "https://proceedings.mlr.press/v139/koh21a.html",
          "category": "R",
          "role": "core-concept",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations",
          "scope": "Benchmark design and performance under specified real-world distribution shifts. The datasets do not establish performance for AI artifact attribution.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "evidence-contamination",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#evidence-contamination"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Distinguishing examined data from analysis and documenting consequential handling.",
      "limitation": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.2–3.4: examination, analysis, and reporting",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "evidence-identifier",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#evidence-identifier"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Collection scope, source identification, and documented acquisition.",
      "limitation": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "evidence-inventory",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#evidence-inventory"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Collection scope, source identification, and documented acquisition.",
      "limitation": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "evidence-reconstruction",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#evidence-reconstruction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Distinguishing examined data from analysis and documenting consequential handling.",
      "limitation": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.2–3.4: examination, analysis, and reporting",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "execution-trace",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#execution-trace"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Records can describe requests, actor context, timing, and outcomes.",
      "limitation": "API payloads and agent traces vary by implementation, and the record set may be incomplete or alterable.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "AU-3: record content; AU-12: audit-record generation",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.3: application logs",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "exfiltration",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#exfiltration"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Requests and transfers have protocol and authorization context.",
      "limitation": "An attempted request is not a completed transfer; labeling a transfer unauthorized requires the applicable policy and evidence.",
      "references": [
        {
          "id": "httpSemantics",
          "title": "RFC 9110 — HTTP Semantics",
          "url": "https://www.rfc-editor.org/rfc/rfc9110.html",
          "category": "P",
          "role": "limited-context",
          "locator": "§6: messages; §9: methods",
          "scope": "Sections 6, 8, 9.2.2, and 15.3.3 cover messages, representations, idempotency, retries, and accepted requests. HTTP semantics do not guarantee every agent tool has the same behavior.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "AC-3: access enforcement",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "exif-metadata",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#exif-metadata"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "A standard format can carry EXIF metadata for capture/editing context.",
      "limitation": "PNG storage is one context; tag meanings and validity in other formats require their specifications.",
      "references": [
        {
          "id": "pngSpec",
          "title": "PNG Specification — Third Edition",
          "url": "https://www.w3.org/TR/png/",
          "category": "P",
          "role": "limited-context",
          "locator": "eXIf: Exif metadata chunk",
          "scope": "Bit depth, samples, lossless encoding, file signature, and metadata chunks in PNG. Does not determine AI origin.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "exit-status",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#exit-status"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Process invocation and distinct outcome/output representations.",
      "limitation": "Process success can be narrower than the intended application or external-system effect.",
      "references": [
        {
          "id": "pythonProcess",
          "title": "Python — subprocess management",
          "url": "https://docs.python.org/3/library/subprocess.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Popen; returncode; stdout; stderr",
          "scope": "Process invocation, return codes, and standard output/error streams in the documented API. A zero return code is not independent proof of a destination effect.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "face-reenactment",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#face-reenactment"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Transfer of facial performance to a target representation.",
      "limitation": "The paper’s method is not proof of how a specific video was produced.",
      "references": [
        {
          "id": "faceReenactmentResearch",
          "title": "Face2Face: Real-time Face Capture and Reenactment of RGB Videos (Thies et al., 2016)",
          "url": "https://niessnerlab.org/papers/2016/1facetoface/thies2016face.pdf",
          "category": "R",
          "role": "core-concept",
          "locator": "Abstract and §3: reenactment overview",
          "scope": "The paper’s transfer of facial performance to a target video. Not a universally validated detector.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "face-swap",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#face-swap"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Manipulation categories and their evaluation provide bounded media context.",
      "limitation": "A temporal pattern can have ordinary encoding or capture causes; the benchmark does not validate every such observation.",
      "references": [
        {
          "id": "faceManipulationResearch",
          "title": "FaceForensics++: Learning to Detect Manipulated Facial Images (Rössler et al.)",
          "url": "https://arxiv.org/abs/1901.08971",
          "category": "R",
          "role": "limited-context",
          "locator": "§3: facial manipulation; §4: evaluation under compression",
          "scope": "Facial-manipulation categories and a benchmark under stated compression/evaluation conditions. Findings do not establish performance on every case object.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "false-negative",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#false-negative"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "false-positive",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#false-positive"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "file-carving",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#file-carving"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Locating candidate files through headers and reconstructing available file content.",
      "limitation": "A header or candidate recovery is not a complete format validation or an application association.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.3.1–4.3.2: locating and extracting files; file-header comparisons",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "file-container",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#file-container"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The distinction between streams’ encoding methods and their containing formats.",
      "limitation": "Format recognition alone does not validate a whole file or identify its source.",
      "references": [
        {
          "id": "mediaFormats",
          "title": "Media container formats",
          "url": "https://developer.mozilla.org/en-US/docs/Web/Media/Guides/Formats/Containers",
          "category": "P",
          "role": "core-concept",
          "locator": "Container formats and codecs",
          "scope": "Containers and the distinction between container and codec. Individual file completeness requires examination.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "file-signature",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#file-signature"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Locating candidate files through headers and reconstructing available file content.",
      "limitation": "A header or candidate recovery is not a complete format validation or an application association.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.3.1–4.3.2: locating and extracting files; file-header comparisons",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "filesystem-metadata",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#filesystem-metadata"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Recorded file times and correlation across time representations.",
      "limitation": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "fine-tuning",
      "original_references": [
        "aiRmf"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#fine-tuning"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "forensic-artifact",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#forensic-artifact"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Distinguishing examined data from analysis and documenting consequential handling.",
      "limitation": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.2–3.4: examination, analysis, and reporting",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "forensic-working-copy",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#forensic-working-copy"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Imaging, retained source evidence, working copies, and recorded handling.",
      "limitation": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "frame-rate",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#frame-rate"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Frame-based encoding and codec conversion provide technical context.",
      "limitation": "Presentation rate, frame timestamps, retained metadata, and conversion effects need format-specific examination.",
      "references": [
        {
          "id": "videoCodecs",
          "title": "Web video codec guide",
          "url": "https://developer.mozilla.org/en-US/docs/Web/Media/Guides/Formats/Video_codecs",
          "category": "P",
          "role": "limited-context",
          "locator": "Encoding, frame types, and compression",
          "scope": "Encoding, inter-frame references, and compression artifacts. A temporal inconsistency is not by itself proof of generation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "function-calling",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#function-calling"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Agent actions and structured tool interfaces provide context.",
      "limitation": "Not every agent uses MCP, and a function schema is not proof of execution.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "limited-context",
          "locator": "Agent and action space",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "limited-context",
          "locator": "Tools: tool definitions, inputSchema, and invocation",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "generation-seed",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#generation-seed"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A seed initializes or controls a documented pseudorandom generator.",
      "limitation": "A seed alone is not a complete replay specification; implementation, hardware, and other inputs can matter.",
      "references": [
        {
          "id": "diffusersSeeds",
          "title": "Diffusers — Reproducibility",
          "url": "https://huggingface.co/docs/diffusers/en/using-diffusers/reusing_seeds",
          "category": "P",
          "role": "core-concept",
          "locator": "Random generators and seeds",
          "scope": "Random generators and seed control in the documented generation implementation. A seed alone does not guarantee identical outputs across environments.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "generative-adversarial-network",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#generative-adversarial-network"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generator/discriminator training in the stated model framework.",
      "limitation": "Output appearance alone cannot identify use of the architecture.",
      "references": [
        {
          "id": "ganResearch",
          "title": "Generative Adversarial Nets (Goodfellow et al., 2014)",
          "url": "https://arxiv.org/abs/1406.2661",
          "category": "R",
          "role": "core-concept",
          "locator": "§2: adversarial framework",
          "scope": "The generator/discriminator training framework. A generic image characteristic does not attribute it to a GAN.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "generative-ai",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#generative-ai"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "limitation": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "references": [
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "core-concept",
          "locator": "Technical approaches: detection, watermarking, and provenance",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "generative-artifact",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#generative-artifact"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "ground-truth",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#ground-truth"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "guidance-scale",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#guidance-scale"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Input-image conditioning and named controls are documented for this generation pipeline.",
      "limitation": "These are implementation-specific parameter meanings; they do not prove the settings of an unknown historical run.",
      "references": [
        {
          "id": "diffusersImage",
          "title": "Diffusers — Stable Diffusion image-to-image pipeline",
          "url": "https://huggingface.co/docs/diffusers/en/api/pipelines/stable_diffusion/img2img",
          "category": "P",
          "role": "core-concept",
          "locator": "StableDiffusionImg2ImgPipeline parameters: image, negative_prompt, guidance_scale",
          "scope": "Input-image conditioning, negative prompts, guidance, and sampling parameters in this pipeline. Not universal semantics for all image generators.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "hard-binding",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#hard-binding"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Different mechanisms for associating provenance with content.",
      "limitation": "Their validity and tolerance are scheme specific; neither guarantees the scene is true.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§9.2–9.3: hard and soft bindings",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "hash-collision",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#hash-collision"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Hash algorithms, fixed-size digests, and the distinction between input bytes and a digest.",
      "limitation": "Algorithm properties alone do not authenticate origin, establish custody, or exclude all collisions.",
      "references": [
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 180-4: message digests and SHA-256",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "hash-digest",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#hash-digest"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Hash algorithms, fixed-size digests, and the distinction between input bytes and a digest.",
      "limitation": "Algorithm properties alone do not authenticate origin, establish custody, or exclude all collisions.",
      "references": [
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 180-4: message digests and SHA-256",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "hash-verification",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#hash-verification"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Comparing acquired bytes with a documented reference using digests.",
      "limitation": "The result is a bounded byte-integrity statement, not a truth or authorship finding.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.2.2: data-file integrity and message-digest comparison",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 180-4: digest algorithms",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "human-ai-interaction",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#human-ai-interaction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "hyperparameter",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#hyperparameter"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "idempotency",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#idempotency"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Repeating an operation can preserve its intended effect under the relevant semantics.",
      "limitation": "Do not infer idempotency from a method name or apply HTTP guarantees to an unrelated tool.",
      "references": [
        {
          "id": "httpSemantics",
          "title": "RFC 9110 — HTTP Semantics",
          "url": "https://www.rfc-editor.org/rfc/rfc9110.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§9.2.2: idempotent methods and automatic retries",
          "scope": "Sections 6, 8, 9.2.2, and 15.3.3 cover messages, representations, idempotency, retries, and accepted requests. HTTP semantics do not guarantee every agent tool has the same behavior.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "identity-claim",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#identity-claim"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Claimed identities and defined checks against supplied evidence or presentations.",
      "limitation": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "references": [
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Identity proofing, validation, verification, and biometrics",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.2.3: biometrics and presentation attacks",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "identity-fusion",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#identity-fusion"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "Identity construction and proofing supply background for the project’s broader representation terminology.",
      "limitation": "The established fraud definition includes dishonest gain; it does not classify every fictional or AI-generated persona as fraud.",
      "references": [
        {
          "id": "syntheticIdentityFraud",
          "title": "Synthetic Identity Fraud Defined",
          "url": "https://fedpaymentsimprovement.org/strategic-initiatives/payments-security/synthetic-identity-payments-fraud/synthetic-identity-fraud-defined/",
          "category": "P",
          "role": "editorial-background",
          "locator": "Defining the Problem of Synthetic Identity Fraud",
          "scope": "A voluntary industry definition of fabricated identities used for dishonest gain. Its fraud meaning is narrower than all AI-generated identity representations.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "editorial-background",
          "locator": "Identity resolution and identity evidence",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "identity-linkage",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#identity-linkage"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "limitation": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.4.4: attacker identification and limitations",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Identity resolution and verification",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "identity-proofing",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#identity-proofing"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Claimed identities and defined checks against supplied evidence or presentations.",
      "limitation": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "references": [
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Identity proofing, validation, verification, and biometrics",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.2.3: biometrics and presentation attacks",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "image-synthesis",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#image-synthesis"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "limitation": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "references": [
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "core-concept",
          "locator": "Technical approaches: detection, watermarking, and provenance",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "image-to-image-generation",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#image-to-image-generation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Input-image conditioning and named controls are documented for this generation pipeline.",
      "limitation": "These are implementation-specific parameter meanings; they do not prove the settings of an unknown historical run.",
      "references": [
        {
          "id": "diffusersImage",
          "title": "Diffusers — Stable Diffusion image-to-image pipeline",
          "url": "https://huggingface.co/docs/diffusers/en/api/pipelines/stable_diffusion/img2img",
          "category": "P",
          "role": "core-concept",
          "locator": "StableDiffusionImg2ImgPipeline parameters: image, negative_prompt, guidance_scale",
          "scope": "Input-image conditioning, negative prompts, guidance, and sampling parameters in this pipeline. Not universal semantics for all image generators.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "impersonation",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#impersonation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "limitation": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.4.4: attacker identification and limitations",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Identity resolution and verification",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "impersonation-artifact",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#impersonation-artifact"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "limitation": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.4.4: attacker identification and limitations",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Identity resolution and verification",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "indexeddb",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#indexeddb"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Structured browser database objects and transactions.",
      "limitation": "The cited API 3.0 document is a specification draft; application schema and retention are separate.",
      "references": [
        {
          "id": "indexedDbSpec",
          "title": "Indexed Database API 3.0",
          "url": "https://www.w3.org/TR/IndexedDB/",
          "category": "P",
          "role": "core-concept",
          "locator": "Database, object store, and transactions",
          "scope": "Database, object-store, key, and transaction semantics. The checked publication is a specification draft; no claim that a particular application retains conversations is supported.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "indirect-prompt-injection",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#indirect-prompt-injection"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Instruction influence attempted through an input or encountered material.",
      "limitation": "Presence of instructions does not establish compliance or a downstream effect.",
      "references": [
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "core-concept",
          "locator": "Direct and indirect prompt injection",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "inference",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#inference"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Distinguishing examined data from analysis and documenting consequential handling.",
      "limitation": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.2–3.4: examination, analysis, and reporting",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "inference-runtime",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#inference-runtime"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Configuration and inference artifacts can help distinguish deployment states.",
      "limitation": "Endpoint aliases, labels, routing, and historical runtime identity need independently acquired records.",
      "references": [
        {
          "id": "hfConfig",
          "title": "Transformers — Configuration",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/configuration",
          "category": "P",
          "role": "limited-context",
          "locator": "Model configuration",
          "scope": "Model configuration objects and configuration serialization. A label or configuration file does not prove historical endpoint routing.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "pytorchCheckpoint",
          "title": "PyTorch — Saving and Loading Models",
          "url": "https://docs.pytorch.org/tutorials/beginner/saving_loading_models.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Saving and loading for inference",
          "scope": "State dictionaries, parameter tensors, checkpoints, and inference loading. Not evidence of a particular deployment’s training history or identity.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "inpainting",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#inpainting"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generation within a specified masked region.",
      "limitation": "The result supplies generated content, not independently recovered original detail.",
      "references": [
        {
          "id": "diffusersInpaint",
          "title": "Diffusers — Stable Diffusion inpainting pipeline",
          "url": "https://huggingface.co/docs/diffusers/en/api/pipelines/stable_diffusion/inpaint",
          "category": "P",
          "role": "core-concept",
          "locator": "Image/mask inputs and masked generation",
          "scope": "Masked image generation and input/mask relationships. Not recovery of original missing image detail.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "integrity",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#integrity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Comparing acquired bytes with a documented reference using digests.",
      "limitation": "The result is a bounded byte-integrity statement, not a truth or authorship finding.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.2.2: data-file integrity and message-digest comparison",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 180-4: digest algorithms",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "interaction-forensics",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#interaction-forensics"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "interpretation",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#interpretation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Distinguishing examined data from analysis and documenting consequential handling.",
      "limitation": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.2–3.4: examination, analysis, and reporting",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "job-queue",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#job-queue"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Work items can be retained for later processing with specified completion rules.",
      "limitation": "A library queue is one implementation; distributed queues may have different delivery guarantees.",
      "references": [
        {
          "id": "pythonQueue",
          "title": "Python — queue",
          "url": "https://docs.python.org/3/library/queue.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Queue objects and task tracking",
          "scope": "Queueing objects for subsequent processing and task completion in the documented library. Cloud job systems have their own guarantees.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "jpeg-quantization",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#jpeg-quantization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Quantization and information reduction in the specified JPEG coding process.",
      "limitation": "Lossy transformations affect method-specific signals; they do not by themselves identify AI generation.",
      "references": [
        {
          "id": "jpegSpec",
          "title": "ITU-T T.81 / ISO/IEC 10918-1 — JPEG",
          "url": "https://www.w3.org/Graphics/JPEG/itu-t81.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3: definitions; Annex A and Annex F: DCT-based processes",
          "scope": "Definitions and Annexes A–F describe JPEG coding, quantization, and lossy/lossless processes. Not a forensic attribution procedure.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "keyframe",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#keyframe"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Frame-based encoding and codec conversion provide technical context.",
      "limitation": "Presentation rate, frame timestamps, retained metadata, and conversion effects need format-specific examination.",
      "references": [
        {
          "id": "videoCodecs",
          "title": "Web video codec guide",
          "url": "https://developer.mozilla.org/en-US/docs/Web/Media/Guides/Formats/Video_codecs",
          "category": "P",
          "role": "limited-context",
          "locator": "Encoding, frame types, and compression",
          "scope": "Encoding, inter-frame references, and compression artifacts. A temporal inconsistency is not by itself proof of generation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "large-language-model",
      "original_references": [
        "aiRmf"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#large-language-model"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Language sequences and numerical representations have documented model contexts.",
      "limitation": "A Transformer paper is not a complete definition of every LLM or multimodal deployment.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "limited-context",
          "locator": "Named entries: large language model, multimodal, embedding",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "transformerResearch",
          "title": "Attention Is All You Need (Vaswani et al., 2017)",
          "url": "https://arxiv.org/abs/1706.03762",
          "category": "R",
          "role": "limited-context",
          "locator": "§3: model architecture and embeddings",
          "scope": "Transformer attention and sequence representation in the studied architecture. Not a definition of all modern deployments.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "latent-representation",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#latent-representation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Latent representation and text-conditioned image synthesis in the studied architecture.",
      "limitation": "An acquired latent or image does not identify its whole creation history.",
      "references": [
        {
          "id": "latentDiffusionResearch",
          "title": "High-Resolution Image Synthesis with Latent Diffusion Models (Rombach et al.)",
          "url": "https://arxiv.org/abs/2112.10752",
          "category": "R",
          "role": "core-concept",
          "locator": "§3: latent diffusion and conditioning",
          "scope": "Latent-space diffusion and conditional image synthesis in the paper’s models. Results are bounded by its experiments.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "least-privilege",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#least-privilege"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "limitation": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "lip-synchronization",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#lip-synchronization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The relationship between mouth movement and target speech in the studied synthesis task.",
      "limitation": "Good alignment does not establish authentic capture or consent.",
      "references": [
        {
          "id": "lipSyncResearch",
          "title": "A Lip Sync Expert Is All You Need for Speech to Lip Generation In The Wild (Prajwal et al.)",
          "url": "https://arxiv.org/abs/2008.10010",
          "category": "R",
          "role": "core-concept",
          "locator": "Problem statement and lip-synchronization evaluation",
          "scope": "Speech-conditioned lip synchronization and the paper’s evaluation. Synchronization alone does not establish authentic capture.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "live-acquisition",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#live-acquisition"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Running-system collection and information that can change or disappear.",
      "limitation": "Available evidence and collection effects require environment-specific validation.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.1.2: volatile data; §5.2.1: collecting volatile OS data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "liveness-detection",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#liveness-detection"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Claimed identities and defined checks against supplied evidence or presentations.",
      "limitation": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "references": [
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Identity proofing, validation, verification, and biometrics",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.2.3: biometrics and presentation attacks",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "localstorage",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#localstorage"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The web platform’s string key/value stores and their origin/session scope.",
      "limitation": "Application-defined sessions are not necessarily browser page sessions.",
      "references": [
        {
          "id": "webStorageSpec",
          "title": "HTML Standard — Web storage",
          "url": "https://html.spec.whatwg.org/multipage/webstorage.html",
          "category": "P",
          "role": "core-concept",
          "locator": "The sessionStorage and localStorage attributes",
          "scope": "The localStorage and sessionStorage interfaces and their scopes. The standard does not identify the contents of a particular application’s storage.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "logical-acquisition",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#logical-acquisition"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Selection of files rather than a full media image.",
      "limitation": "Application and cloud-object acquisition extend beyond the source’s logical-backup example.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.1: logical backup versus bit-stream imaging",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "lora",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#lora"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Trainable low-rank components used to adapt a pretrained model.",
      "limitation": "The paper does not prove that a particular acquired deployment used LoRA.",
      "references": [
        {
          "id": "loraResearch",
          "title": "LoRA: Low-Rank Adaptation of Large Language Models (Hu et al.)",
          "url": "https://arxiv.org/abs/2106.09685v2",
          "category": "R",
          "role": "core-concept",
          "locator": "§4: low-rank adaptation",
          "scope": "The paper’s low-rank adaptation method, which freezes pretrained weights and adds trainable low-rank components. Not evidence of a particular deployment’s configuration.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "lossless-compression",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#lossless-compression"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Sample bit depth and lossless PNG representation.",
      "limitation": "The underlying signal, model precision, and other formats require their own semantics.",
      "references": [
        {
          "id": "pngSpec",
          "title": "PNG Specification — Third Edition",
          "url": "https://www.w3.org/TR/png/",
          "category": "P",
          "role": "core-concept",
          "locator": "Definitions; sample representation; image data encoding",
          "scope": "Bit depth, samples, lossless encoding, file signature, and metadata chunks in PNG. Does not determine AI origin.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "lossy-compression",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#lossy-compression"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Quantization and information reduction in the specified JPEG coding process.",
      "limitation": "Lossy transformations affect method-specific signals; they do not by themselves identify AI generation.",
      "references": [
        {
          "id": "jpegSpec",
          "title": "ITU-T T.81 / ISO/IEC 10918-1 — JPEG",
          "url": "https://www.w3.org/Graphics/JPEG/itu-t81.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3: definitions; Annex A and Annex F: DCT-based processes",
          "scope": "Definitions and Annexes A–F describe JPEG coding, quantization, and lossy/lossless processes. Not a forensic attribution procedure.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "magic-bytes",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#magic-bytes"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Locating candidate files through headers and reconstructing available file content.",
      "limitation": "A header or candidate recovery is not a complete format validation or an application association.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.3.1–4.3.2: locating and extracting files; file-header comparisons",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "manifest",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#manifest"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Concrete structured records identify claims, inputs, and relationships.",
      "limitation": "A generic manifest has format-specific semantics; neither source defines every release manifest.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "limited-context",
          "locator": "§10–11: claims and manifests",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "slsaProvenance",
          "title": "SLSA Provenance v1.1",
          "url": "https://slsa.dev/spec/v1.1/provenance",
          "category": "P",
          "role": "limited-context",
          "locator": "Provenance schema",
          "scope": "Build definitions, dependencies, builder identity, and run details. Provenance assertions do not independently prove a build was uncompromised.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "mcp",
      "original_references": [
        "mcp"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#mcp"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "limitation": "The protocol does not guarantee durable logs or independent target-system success.",
      "references": [
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "core-concept",
          "locator": "Protocol Messages; Tool Result; error handling",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "media-lineage",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#media-lineage"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "General lineage relationships support recording origins and changes.",
      "limitation": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "limited-context",
          "locator": "§2 and §5.2: provenance relationships and derivation",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "message-identifier",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#message-identifier"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "metadata",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#metadata"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Recorded file times and correlation across time representations.",
      "limitation": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "model-adapter",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-adapter"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "An adaptation component can change behavior while retaining pretrained parameters.",
      "limitation": "The paper studies particular NLP adapters, not every modification or deployment.",
      "references": [
        {
          "id": "adapterResearch",
          "title": "Parameter-Efficient Transfer Learning for NLP (Houlsby et al., 2019)",
          "url": "https://proceedings.mlr.press/v97/houlsby19a.html",
          "category": "R",
          "role": "core-concept",
          "locator": "Adapter architecture and parameter-efficient transfer",
          "scope": "The paper’s adapter modules and adaptation with retained pretrained parameters. Does not describe every possible adapter.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "model-attribution",
      "original_references": [
        "aiRmf"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-attribution"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Unseen-category rejection provides methodological context for withholding a candidate label.",
      "limitation": "The recognition study is not validation of generative-model attribution or source identification from output style.",
      "references": [
        {
          "id": "openWorldResearch",
          "title": "Towards Open World Recognition (Bendale & Boult)",
          "url": "https://arxiv.org/abs/1412.5687",
          "category": "R",
          "role": "limited-context",
          "locator": "Open-world problem definition and evaluation",
          "scope": "Recognition and evaluation with unseen categories. Background for unknown-source rejection, not a validated method for identifying generative models from their outputs.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "model-checkpoint",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-checkpoint"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A saved parameter/training state in a documented framework.",
      "limitation": "Checkpoint scope varies; a saved file does not establish use in a particular interaction.",
      "references": [
        {
          "id": "pytorchCheckpoint",
          "title": "PyTorch — Saving and Loading Models",
          "url": "https://docs.pytorch.org/tutorials/beginner/saving_loading_models.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Saving and Loading a General Checkpoint",
          "scope": "State dictionaries, parameter tensors, checkpoints, and inference loading. Not evidence of a particular deployment’s training history or identity.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "model-configuration",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-configuration"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Settings that instantiate or describe a model.",
      "limitation": "A supplied configuration is not independent proof of historical deployment settings.",
      "references": [
        {
          "id": "hfConfig",
          "title": "Transformers — Configuration",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/configuration",
          "category": "P",
          "role": "core-concept",
          "locator": "PretrainedConfig and configuration serialization",
          "scope": "Model configuration objects and configuration serialization. A label or configuration file does not prove historical endpoint routing.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "model-forensics",
      "original_references": [
        "aiRmf"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-forensics"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "model-lineage",
      "original_references": [
        "aiRmf"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-lineage"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "General lineage relationships support recording origins and changes.",
      "limitation": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "limited-context",
          "locator": "§2 and §5.2: provenance relationships and derivation",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "model-provenance",
      "original_references": [
        "aiRmf"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-provenance"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "General lineage relationships support recording origins and changes.",
      "limitation": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "limited-context",
          "locator": "§2 and §5.2: provenance relationships and derivation",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "model-version",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-version"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Configuration and inference artifacts can help distinguish deployment states.",
      "limitation": "Endpoint aliases, labels, routing, and historical runtime identity need independently acquired records.",
      "references": [
        {
          "id": "hfConfig",
          "title": "Transformers — Configuration",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/configuration",
          "category": "P",
          "role": "limited-context",
          "locator": "Model configuration",
          "scope": "Model configuration objects and configuration serialization. A label or configuration file does not prove historical endpoint routing.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "pytorchCheckpoint",
          "title": "PyTorch — Saving and Loading Models",
          "url": "https://docs.pytorch.org/tutorials/beginner/saving_loading_models.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Saving and loading for inference",
          "scope": "State dictionaries, parameter tensors, checkpoints, and inference loading. Not evidence of a particular deployment’s training history or identity.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "model-weights",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#model-weights"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "multi-factor-authentication",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#multi-factor-authentication"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "limitation": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "references": [
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Authenticator types; authentication processes; §5: session management",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Enrollment and subscriber accounts",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "multimodal",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#multimodal"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Language sequences and numerical representations have documented model contexts.",
      "limitation": "A Transformer paper is not a complete definition of every LLM or multimodal deployment.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "limited-context",
          "locator": "Named entries: large language model, multimodal, embedding",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "transformerResearch",
          "title": "Attention Is All You Need (Vaswani et al., 2017)",
          "url": "https://arxiv.org/abs/1706.03762",
          "category": "R",
          "role": "limited-context",
          "locator": "§3: model architecture and embeddings",
          "scope": "Transformer attention and sequence representation in the studied architecture. Not a definition of all modern deployments.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "negative-prompt",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#negative-prompt"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Input-image conditioning and named controls are documented for this generation pipeline.",
      "limitation": "These are implementation-specific parameter meanings; they do not prove the settings of an unknown historical run.",
      "references": [
        {
          "id": "diffusersImage",
          "title": "Diffusers — Stable Diffusion image-to-image pipeline",
          "url": "https://huggingface.co/docs/diffusers/en/api/pipelines/stable_diffusion/img2img",
          "category": "P",
          "role": "core-concept",
          "locator": "StableDiffusionImg2ImgPipeline parameters: image, negative_prompt, guidance_scale",
          "scope": "Input-image conditioning, negative prompts, guidance, and sampling parameters in this pipeline. Not universal semantics for all image generators.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "network-request",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#network-request"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Requests and transfers have protocol and authorization context.",
      "limitation": "An attempted request is not a completed transfer; labeling a transfer unauthorized requires the applicable policy and evidence.",
      "references": [
        {
          "id": "httpSemantics",
          "title": "RFC 9110 — HTTP Semantics",
          "url": "https://www.rfc-editor.org/rfc/rfc9110.html",
          "category": "P",
          "role": "limited-context",
          "locator": "§6: messages; §9: methods",
          "scope": "Sections 6, 8, 9.2.2, and 15.3.3 cover messages, representations, idempotency, retries, and accepted requests. HTTP semantics do not guarantee every agent tool has the same behavior.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "AC-3: access enforcement",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "observation",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#observation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Distinguishing examined data from analysis and documenting consequential handling.",
      "limitation": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§3.2–3.4: examination, analysis, and reporting",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "operator-attribution",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#operator-attribution"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "limitation": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.4.4: attacker identification and limitations",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Identity resolution and verification",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "origin-claim",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#origin-claim"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Protected provenance assertions and the structure that references them.",
      "limitation": "Validation of an assertion is distinct from factual truth and completeness.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§6: assertions; §10: claims; §1.2: scope",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "outpainting",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#outpainting"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Conditional masked generation provides technical context for extending a representation.",
      "limitation": "The exact outside-boundary workflow is editorial and implementation dependent; the source is not asserted to define every outpainting interface.",
      "references": [
        {
          "id": "latentDiffusionResearch",
          "title": "High-Resolution Image Synthesis with Latent Diffusion Models (Rombach et al.)",
          "url": "https://arxiv.org/abs/2112.10752",
          "category": "R",
          "role": "limited-context",
          "locator": "§3.3: conditioning and image synthesis",
          "scope": "Latent-space diffusion and conditional image synthesis in the paper’s models. Results are bounded by its experiments.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "diffusersInpaint",
          "title": "Diffusers — Stable Diffusion inpainting pipeline",
          "url": "https://huggingface.co/docs/diffusers/en/api/pipelines/stable_diffusion/inpaint",
          "category": "P",
          "role": "limited-context",
          "locator": "Masked image generation",
          "scope": "Masked image generation and input/mask relationships. Not recovery of original missing image detail.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "overfitting",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#overfitting"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "parent-message",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#parent-message"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "parent-process",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#parent-process"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "OS-specific process creation and identifiers.",
      "limitation": "Check the actual operating system, identifier lifetime, and reuse before correlating records.",
      "references": [
        {
          "id": "linuxFork",
          "title": "Linux man-pages — fork(2)",
          "url": "https://man7.org/linux/man-pages/man2/fork.2.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Parent/child process and PID relationships",
          "scope": "Parent/child process semantics and identifiers on Linux. Identifier meaning and reuse must be checked for the actual operating system.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "perceptual-hash",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#perceptual-hash"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Method-dependent compact image representations for similarity comparison.",
      "limitation": "Perceptual similarity is not cryptographic byte identity or source attribution.",
      "references": [
        {
          "id": "imageHashes",
          "title": "OpenCV — image hashing module",
          "url": "https://docs.opencv.org/4.13.0/d4/d93/group__img__hash.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Image hash algorithms and comparisons",
          "scope": "Method-specific image hashes and comparisons. Perceptual similarity is not cryptographic byte integrity.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "permission-boundary",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#permission-boundary"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "limitation": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "persistence",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#persistence"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Browser/application retention, navigation records, and storage lifetime.",
      "limitation": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.3: logs; §7.2.2: web usage",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "storageSpec",
          "title": "Storage Standard",
          "url": "https://storage.spec.whatwg.org/",
          "category": "P",
          "role": "limited-context",
          "locator": "Persistence and storage clearing",
          "scope": "Storage keys, persistence, and storage endpoints in the living specification. Persistence of particular evidence depends on the application and browser.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "precision",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#precision"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "presentation-attack",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#presentation-attack"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Claimed identities and defined checks against supplied evidence or presentations.",
      "limitation": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "references": [
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Identity proofing, validation, verification, and biometrics",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.2.3: biometrics and presentation attacks",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "preservation",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#preservation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Imaging, retained source evidence, working copies, and recorded handling.",
      "limitation": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "process-identifier",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#process-identifier"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "OS-specific process creation and identifiers.",
      "limitation": "Check the actual operating system, identifier lifetime, and reuse before correlating records.",
      "references": [
        {
          "id": "linuxFork",
          "title": "Linux man-pages — fork(2)",
          "url": "https://man7.org/linux/man-pages/man2/fork.2.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Parent/child process and PID relationships",
          "scope": "Parent/child process semantics and identifiers on Linux. Identifier meaning and reuse must be checked for the actual operating system.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "prompt",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prompt"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Role-labeled messages can be serialized into model input through templates.",
      "limitation": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "references": [
        {
          "id": "hfChat",
          "title": "Transformers — Chat templates",
          "url": "https://huggingface.co/docs/transformers/en/chat_templating",
          "category": "P",
          "role": "limited-context",
          "locator": "Role/content messages and serialized chat templates",
          "scope": "Role/content messages and conversion to a model’s serialized input. This does not document a universal conversation export or revision graph.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "prompt-history",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prompt-history"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "prompt-injection",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prompt-injection"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Instruction influence attempted through an input or encountered material.",
      "limitation": "Presence of instructions does not establish compliance or a downstream effect.",
      "references": [
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "core-concept",
          "locator": "Direct and indirect prompt injection",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "prompt-reconstruction",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prompt-reconstruction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "prompt-template",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prompt-template"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Role-labeled messages can be serialized into model input through templates.",
      "limitation": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "references": [
        {
          "id": "hfChat",
          "title": "Transformers — Chat templates",
          "url": "https://huggingface.co/docs/transformers/en/chat_templating",
          "category": "P",
          "role": "limited-context",
          "locator": "Role/content messages and serialized chat templates",
          "scope": "Role/content messages and conversion to a model’s serialized input. This does not document a universal conversation export or revision graph.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "prov-activity",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prov-activity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The named PROV types and responsibility roles.",
      "limitation": "A PROV agent can be software; it is not automatically an autonomous AI agent or a human operator.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.1–5.3: entities/activities, derivation, and responsibility",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "prov-agent",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prov-agent"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The named PROV types and responsibility roles.",
      "limitation": "A PROV agent can be software; it is not automatically an autonomous AI agent or a human operator.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.1–5.3: entities/activities, derivation, and responsibility",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "prov-entity",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#prov-entity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The named PROV types and responsibility roles.",
      "limitation": "A PROV agent can be software; it is not automatically an autonomous AI agent or a human operator.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.1–5.3: entities/activities, derivation, and responsibility",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "provenance",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#provenance"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "limitation": "A provenance description is not independent proof that each relationship occurred.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "provenance-assertion",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#provenance-assertion"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Protected provenance assertions and the structure that references them.",
      "limitation": "Validation of an assertion is distinct from factual truth and completeness.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§6: assertions; §10: claims; §1.2: scope",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "provenance-gap",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#provenance-gap"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "General lineage relationships support recording origins and changes.",
      "limitation": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "limited-context",
          "locator": "§2 and §5.2: provenance relationships and derivation",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "provenance-graph",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#provenance-graph"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "limitation": "A provenance description is not independent proof that each relationship occurred.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "public-key",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#public-key"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Keys, signatures, and the certificate assertions used during verification.",
      "limitation": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "references": [
        {
          "id": "digitalSignatures",
          "title": "FIPS 186-5 — Digital Signature Standard",
          "url": "https://csrc.nist.gov/pubs/fips/186-5/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 186-5: signature generation and verification",
          "scope": "Digital signature generation and verification. A valid signature is not proof that a signed statement describes a true event.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1: certificate and subject public-key information",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "quantization",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#quantization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Reduced-precision representations used by the documented computation framework.",
      "limitation": "Format, scale, and configuration affect behavior and must be identified in the acquired environment.",
      "references": [
        {
          "id": "quantizationDoc",
          "title": "PyTorch — Quantization, version 2.14 documentation",
          "url": "https://docs.pytorch.org/docs/2.14/quantization.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Quantization introduction and reduced-precision computation",
          "scope": "Reduced-precision quantization concepts and the documented implementation. Legacy APIs and implementation guidance are version dependent.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "race-condition",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#race-condition"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Shared-state outcomes can depend on relative execution timing without proper synchronization.",
      "limitation": "A mismatch alone does not establish that a race caused it.",
      "references": [
        {
          "id": "raceCwe",
          "title": "CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization",
          "url": "https://cwe.mitre.org/data/definitions/362.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Description and common consequences",
          "scope": "The shared-resource race-condition weakness. Concurrency-related discrepancies require actual timing and state evidence.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "read-only-access",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#read-only-access"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Hardware/software protection against specified writes.",
      "limitation": "A write restriction is scoped to its interface; the surrounding running environment can still change.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.2.1: preventing writes during acquisition",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "reality-model-drift",
      "original_references": [
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#reality-model-drift"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General source-memory theory supplies background only.",
      "limitation": "These operational/working concepts are project editorial formulations; no established diagnosis, measured AI effect, or validated instrument is asserted.",
      "references": [
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "editorial-background",
          "locator": "Source-monitoring framework",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "recall",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#recall"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "receiver-operating-characteristic",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#receiver-operating-characteristic"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "redaction",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#redaction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Purpose-bounded processing and controlled disclosure/retention of information.",
      "limitation": "The project’s evidence-report redaction practice is an editorial application, not a universal legal rule.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "PT-3: processing purposes; SI-12: information management",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "regeneration",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#regeneration"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "replay-attack",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#replay-attack"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Replay, synthesis, and conversion are distinct speech-spoofing conditions.",
      "limitation": "The evaluated recordings and simulated replay conditions do not establish how a case recording was created.",
      "references": [
        {
          "id": "asvSpoofResearch",
          "title": "ASVspoof 2019: A large-scale public database of synthesized, converted and replayed speech (Wang et al.)",
          "url": "https://arxiv.org/abs/1911.01601",
          "category": "R",
          "role": "core-concept",
          "locator": "Database design: logical and physical access scenarios",
          "scope": "Defined speech synthesis, conversion, and replay conditions for speaker-verification spoofing evaluation. Does not identify an operator or validate every case recording.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "reproducibility",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#reproducibility"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Documented repeatable procedures and evaluation of tool results.",
      "limitation": "This source does not experimentally validate this glossary, an AI detector, or an application interpretation.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.1: imaging documentation and forensic-tool testing",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "response-revision",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#response-revision"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "retention-policy",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#retention-policy"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Browser/application retention, navigation records, and storage lifetime.",
      "limitation": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§7.1.3: logs; §7.2.2: web usage",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "storageSpec",
          "title": "Storage Standard",
          "url": "https://storage.spec.whatwg.org/",
          "category": "P",
          "role": "limited-context",
          "locator": "Persistence and storage clearing",
          "scope": "Storage keys, persistence, and storage endpoints in the living specification. Persistence of particular evidence depends on the application and browser.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "retrieval-query",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#retrieval-query"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Retrieval can provide external material for a generation workflow.",
      "limitation": "Retrieved records, model-visible material, and durable logs must be distinguished in a particular implementation.",
      "references": [
        {
          "id": "ragResearch",
          "title": "Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks (Lewis et al., 2020)",
          "url": "https://arxiv.org/abs/2005.11401",
          "category": "R",
          "role": "core-concept",
          "locator": "§2: retriever and generator architecture",
          "scope": "The paper’s retrieval-augmented generation architecture. Source retrieval, model context, and durable logs are distinct in actual systems.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "retrieval-augmented-generation",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#retrieval-augmented-generation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Retrieval can provide external material for a generation workflow.",
      "limitation": "Retrieved records, model-visible material, and durable logs must be distinguished in a particular implementation.",
      "references": [
        {
          "id": "ragResearch",
          "title": "Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks (Lewis et al., 2020)",
          "url": "https://arxiv.org/abs/2005.11401",
          "category": "R",
          "role": "core-concept",
          "locator": "§2: retriever and generator architecture",
          "scope": "The paper’s retrieval-augmented generation architecture. Source retrieval, model context, and durable logs are distinct in actual systems.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "retrieved-document",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#retrieved-document"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Retrieval can provide external material for a generation workflow.",
      "limitation": "Retrieved records, model-visible material, and durable logs must be distinguished in a particular implementation.",
      "references": [
        {
          "id": "ragResearch",
          "title": "Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks (Lewis et al., 2020)",
          "url": "https://arxiv.org/abs/2005.11401",
          "category": "R",
          "role": "core-concept",
          "locator": "§2: retriever and generator architecture",
          "scope": "The paper’s retrieval-augmented generation architecture. Source retrieval, model context, and durable logs are distinct in actual systems.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "retry",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#retry"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Repeating an operation can preserve its intended effect under the relevant semantics.",
      "limitation": "Do not infer idempotency from a method name or apply HTTP guarantees to an unrelated tool.",
      "references": [
        {
          "id": "httpSemantics",
          "title": "RFC 9110 — HTTP Semantics",
          "url": "https://www.rfc-editor.org/rfc/rfc9110.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§9.2.2: idempotent methods and automatic retries",
          "scope": "Sections 6, 8, 9.2.2, and 15.3.3 cover messages, representations, idempotency, retries, and accepted requests. HTTP semantics do not guarantee every agent tool has the same behavior.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "revocation",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#revocation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "limitation": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "references": [
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "sample-rate",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sample-rate"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Audio sample timing and time-domain representations.",
      "limitation": "Recording quality and attribution are outside the API specification.",
      "references": [
        {
          "id": "webAudioSpec",
          "title": "Web Audio API 1.0",
          "url": "https://www.w3.org/TR/webaudio-1.0/",
          "category": "P",
          "role": "core-concept",
          "locator": "AudioBuffer; AnalyserNode time-domain data",
          "scope": "AudioBuffer sample-rate/channel data and time-domain/frequency-domain analysis. Web API semantics do not validate speaker identity.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sampler",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sampler"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A specified iterative diffusion generation and sampling procedure.",
      "limitation": "Sampler names and step parameters vary across implementations; reproduction of a historical result is not guaranteed.",
      "references": [
        {
          "id": "diffusionResearch",
          "title": "Denoising Diffusion Probabilistic Models (Ho et al., 2020)",
          "url": "https://arxiv.org/abs/2006.11239",
          "category": "R",
          "role": "core-concept",
          "locator": "§2–3: diffusion and reverse-process sampling",
          "scope": "The paper’s denoising diffusion model and sampling process. It does not identify which generator produced a case object.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sampling-steps",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sampling-steps"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A specified iterative diffusion generation and sampling procedure.",
      "limitation": "Sampler names and step parameters vary across implementations; reproduction of a historical result is not guaranteed.",
      "references": [
        {
          "id": "diffusionResearch",
          "title": "Denoising Diffusion Probabilistic Models (Ho et al., 2020)",
          "url": "https://arxiv.org/abs/2006.11239",
          "category": "R",
          "role": "core-concept",
          "locator": "§2–3: diffusion and reverse-process sampling",
          "scope": "The paper’s denoising diffusion model and sampling process. It does not identify which generator produced a case object.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sandbox",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sandbox"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Isolation and restricted permissions supply the core containment context.",
      "limitation": "The sandbox’s actual interfaces and escape resistance require separate testing.",
      "references": [
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "SC-39: process isolation; AC-6: least privilege",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "semantic-similarity",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#semantic-similarity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Similarity depends on the representation and comparison method.",
      "limitation": "Semantic similarity does not establish identical meaning, source, or authorship.",
      "references": [
        {
          "id": "sentenceBertResearch",
          "title": "Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks (Reimers & Gurevych)",
          "url": "https://arxiv.org/abs/1908.10084",
          "category": "R",
          "role": "core-concept",
          "locator": "Sentence embeddings and similarity evaluation",
          "scope": "Sentence representations and method-specific similarity comparisons. Similarity is not proof of common authorship or identical meaning.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "sensitivity",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sensitivity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "session",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#session"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "limitation": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "references": [
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Authenticator types; authentication processes; §5: session management",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Enrollment and subscriber accounts",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "session-token",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#session-token"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "limitation": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "references": [
        {
          "id": "authentication",
          "title": "NIST SP 800-63B-4: Authentication and Authenticator Management",
          "url": "https://pages.nist.gov/800-63-4/sp800-63b.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Authenticator types; authentication processes; §5: session management",
          "scope": "Authentication and authenticator management in revision 4. Account authentication and forensic identification of a person are distinct questions.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Enrollment and subscriber accounts",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sessionstorage",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sessionstorage"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "The web platform’s string key/value stores and their origin/session scope.",
      "limitation": "Application-defined sessions are not necessarily browser page sessions.",
      "references": [
        {
          "id": "webStorageSpec",
          "title": "HTML Standard — Web storage",
          "url": "https://html.spec.whatwg.org/multipage/webstorage.html",
          "category": "P",
          "role": "core-concept",
          "locator": "The sessionStorage and localStorage attributes",
          "scope": "The localStorage and sessionStorage interfaces and their scopes. The standard does not identify the contents of a particular application’s storage.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sha-256",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sha-256"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Hash algorithms, fixed-size digests, and the distinction between input bytes and a digest.",
      "limitation": "Algorithm properties alone do not authenticate origin, establish custody, or exclude all collisions.",
      "references": [
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 180-4: message digests and SHA-256",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sidecar-file",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sidecar-file"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "An external provenance record is one example of metadata stored separately from an asset.",
      "limitation": "The broad sidecar concept is not restricted to C2PA or defined identically by every format.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "limited-context",
          "locator": "§11.4: external manifests",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "signer",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#signer"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Keys, signatures, and the certificate assertions used during verification.",
      "limitation": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "references": [
        {
          "id": "digitalSignatures",
          "title": "FIPS 186-5 — Digital Signature Standard",
          "url": "https://csrc.nist.gov/pubs/fips/186-5/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 186-5: signature generation and verification",
          "scope": "Digital signature generation and verification. A valid signature is not proof that a signed statement describes a true event.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1: certificate and subject public-key information",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "signing-key",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#signing-key"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Keys, signatures, and the certificate assertions used during verification.",
      "limitation": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "references": [
        {
          "id": "digitalSignatures",
          "title": "FIPS 186-5 — Digital Signature Standard",
          "url": "https://csrc.nist.gov/pubs/fips/186-5/final",
          "category": "P",
          "role": "core-concept",
          "locator": "FIPS 186-5: signature generation and verification",
          "scope": "Digital signature generation and verification. A valid signature is not proof that a signed statement describes a true event.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1: certificate and subject public-key information",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "slack-space",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#slack-space"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Allocated slack, unallocated regions, and residual file data.",
      "limitation": "Logical application deletion and physical recovery are separate; recovery is not guaranteed.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1.2–4.1.3: filesystems, free space, slack, and residual data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sockpuppet-account",
      "original_references": [
        "nistSynthetic",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sockpuppet-account"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Multiple apparent accounts can be controlled by one actor.",
      "limitation": "The study’s behavioral patterns are not proof of common control for any particular accounts.",
      "references": [
        {
          "id": "sockpuppetResearch",
          "title": "An Army of Me: Sockpuppets in Online Discussion Communities (Kumar et al., 2017)",
          "url": "https://arxiv.org/abs/1703.07355",
          "category": "R",
          "role": "core-concept",
          "locator": "§1: definition and studied discussion communities",
          "scope": "Accounts under common control and behavioral comparisons in the studied communities. Similarity alone does not establish common control.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "soft-binding",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#soft-binding"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Different mechanisms for associating provenance with content.",
      "limitation": "Their validity and tolerance are scheme specific; neither guarantees the scene is true.",
      "references": [
        {
          "id": "c2paTechnical",
          "title": "C2PA 2.4 Technical Specification",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§9.2–9.3: hard and soft bindings",
          "scope": "Sections 1.2, 9–11, and 14–15 define scope, bindings, claims, manifests, trust, and validation. Validation of assertions is distinct from factual truth.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "source-attribution",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#source-attribution"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "limitation": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.4.4: attacker identification and limitations",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "limited-context",
          "locator": "Identity resolution and verification",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "source-memory",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#source-memory"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Remembered source attribution and errors in that attribution.",
      "limitation": "The general memory framework does not empirically validate synthetic-imprinting effects.",
      "references": [
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "core-concept",
          "locator": "Source-monitoring framework, pp. 3–28",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "source-monitoring-error",
      "original_references": [
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#source-monitoring-error"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Remembered source attribution and errors in that attribution.",
      "limitation": "The general memory framework does not empirically validate synthetic-imprinting effects.",
      "references": [
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "core-concept",
          "locator": "Source-monitoring framework, pp. 3–28",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "speaker-verification",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#speaker-verification"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "An enrolled speaker representation is compared with a test segment under defined conditions.",
      "limitation": "A match does not establish consent, operator identity, or general performance outside the evaluation.",
      "references": [
        {
          "id": "speakerEvaluation",
          "title": "NIST 2021 Speaker Recognition Evaluation Plan",
          "url": "https://www.nist.gov/system/files/documents/2021/07/12/2021_SRE_Evaluation_Plan_V5.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§2: evaluation tasks; enrollment and target/non-target trials",
          "scope": "July 12, 2021 plan: enrollment/test segments, target/non-target trials, and performance metrics. Evaluation conditions do not establish identity or consent in a particular case.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "specificity",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#specificity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Defined reference/prediction classes and decision-based classification metrics.",
      "limitation": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "references": [
        {
          "id": "sklearnMetrics",
          "title": "Metrics and scoring: quantifying the quality of predictions",
          "url": "https://scikit-learn.org/stable/modules/model_evaluation.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic",
          "scope": "Classification metric formulas, confusion matrices, precision/recall, and ROC evaluation. Application to forensic data needs a defined population and independent validation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "spectrogram",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#spectrogram"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A transform-dependent spectral representation over time.",
      "limitation": "Windowing, sample rate, and other settings affect the result; it does not independently identify a speaker.",
      "references": [
        {
          "id": "spectrogramDoc",
          "title": "SciPy — spectrogram",
          "url": "https://docs.scipy.org/doc/scipy/reference/generated/scipy.signal.spectrogram.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Spectrogram calculation and returned time/frequency bins",
          "scope": "The documented spectral-density calculation and returned time/frequency bins. This is a legacy API; transform settings affect interpretation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "speech-to-speech-conversion",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#speech-to-speech-conversion"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Transforming voice characteristics from supplied speech.",
      "limitation": "This is one conversion family; other speech-to-speech tasks and forensic attribution need separate evidence.",
      "references": [
        {
          "id": "voiceConversionResearch",
          "title": "AutoVC: Zero-Shot Voice Style Transfer with Only Autoencoder Loss (Qian et al., 2019)",
          "url": "https://proceedings.mlr.press/v97/qian19c.html",
          "category": "R",
          "role": "core-concept",
          "locator": "§2–3: related methods and AutoVC",
          "scope": "The paper’s voice-conversion method. General speech transformations and case-specific voice attribution need separate evidence.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "sqlite-wal",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#sqlite-wal"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Committed SQLite changes in a WAL and their transfer during checkpointing.",
      "limitation": "Evidence significance depends on acquisition consistency and the actual application configuration.",
      "references": [
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§2: how WAL works; §2.1: checkpointing",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "standard-error",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#standard-error"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Process invocation and distinct outcome/output representations.",
      "limitation": "Process success can be narrower than the intended application or external-system effect.",
      "references": [
        {
          "id": "pythonProcess",
          "title": "Python — subprocess management",
          "url": "https://docs.python.org/3/library/subprocess.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Popen; returncode; stdout; stderr",
          "scope": "Process invocation, return codes, and standard output/error streams in the documented API. A zero return code is not independent proof of a destination effect.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "standard-output",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#standard-output"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Process invocation and distinct outcome/output representations.",
      "limitation": "Process success can be narrower than the intended application or external-system effect.",
      "references": [
        {
          "id": "pythonProcess",
          "title": "Python — subprocess management",
          "url": "https://docs.python.org/3/library/subprocess.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Popen; returncode; stdout; stderr",
          "scope": "Process invocation, return codes, and standard output/error streams in the documented API. A zero return code is not independent proof of a destination effect.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "stop-sequence",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#stop-sequence"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Documented generation controls and output delivery behavior.",
      "limitation": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "references": [
        {
          "id": "hfGeneration",
          "title": "Transformers — GenerationConfig and generation",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/text_generation",
          "category": "P",
          "role": "core-concept",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers",
          "scope": "Documented temperature, top-p, stopping, generation configuration, and streaming interfaces. These semantics apply to the documented implementation, not every hosted service.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "streaming-response",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#streaming-response"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Documented generation controls and output delivery behavior.",
      "limitation": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "references": [
        {
          "id": "hfGeneration",
          "title": "Transformers — GenerationConfig and generation",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/text_generation",
          "category": "P",
          "role": "core-concept",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers",
          "scope": "Documented temperature, top-p, stopping, generation configuration, and streaming interfaces. These semantics apply to the documented implementation, not every hosted service.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "super-resolution",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#super-resolution"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Learned reconstruction of a higher-resolution representation.",
      "limitation": "Generated detail is not recovered evidence of what the original scene contained.",
      "references": [
        {
          "id": "superResolutionResearch",
          "title": "Image Super-Resolution Using Deep Convolutional Networks (Dong et al.)",
          "url": "https://arxiv.org/abs/1501.00092",
          "category": "R",
          "role": "core-concept",
          "locator": "§3: learning low-to-high-resolution mapping",
          "scope": "The paper’s learned reconstruction from lower-resolution input. Generated detail is not recovered scene truth.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "supply-chain-provenance",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#supply-chain-provenance"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Recorded build inputs, dependencies, builder identity, and execution metadata.",
      "limitation": "These are provenance assertions; a valid representation does not prove an uncompromised build.",
      "references": [
        {
          "id": "slsaProvenance",
          "title": "SLSA Provenance v1.1",
          "url": "https://slsa.dev/spec/v1.1/provenance",
          "category": "P",
          "role": "core-concept",
          "locator": "BuildDefinition and RunDetails",
          "scope": "Build definitions, dependencies, builder identity, and run details. Provenance assertions do not independently prove a build was uncompromised.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "synchronization",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synchronization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Document reconciliation can transfer revision state and retain an identifier with a deletion marker.",
      "limitation": "This is one documented protocol; actual marker contents and synchronization behavior are product dependent.",
      "references": [
        {
          "id": "couchReplication",
          "title": "CouchDB Replication Protocol",
          "url": "https://docs.couchdb.org/en/stable/replication/protocol.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Replication protocol and change-feed deletion markers",
          "scope": "Document synchronization, revision identifiers, and deletion markers in the replication protocol. Other products may retain or reconcile different state.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "synthetic-artifact",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synthetic-artifact"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "synthetic-evidence",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synthetic-evidence"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "synthetic-forensics",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synthetic-forensics"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "synthetic-identity",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synthetic-identity"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "Identity construction and proofing supply background for the project’s broader representation terminology.",
      "limitation": "The established fraud definition includes dishonest gain; it does not classify every fictional or AI-generated persona as fraud.",
      "references": [
        {
          "id": "syntheticIdentityFraud",
          "title": "Synthetic Identity Fraud Defined",
          "url": "https://fedpaymentsimprovement.org/strategic-initiatives/payments-security/synthetic-identity-payments-fraud/synthetic-identity-fraud-defined/",
          "category": "P",
          "role": "editorial-background",
          "locator": "Defining the Problem of Synthetic Identity Fraud",
          "scope": "A voluntary industry definition of fabricated identities used for dishonest gain. Its fraud meaning is narrower than all AI-generated identity representations.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "identityProofing",
          "title": "NIST SP 800-63A-4: Identity Proofing and Enrollment",
          "url": "https://pages.nist.gov/800-63-4/sp800-63a.html",
          "category": "P",
          "role": "editorial-background",
          "locator": "Identity resolution and identity evidence",
          "scope": "Identity resolution, validation, and verification in the revision 4 digital identity guidelines. Not proof of the identity behind a historical account event.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "synthetic-imprinting",
      "original_references": [
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synthetic-imprinting"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General source-memory theory supplies background only.",
      "limitation": "These operational/working concepts are project editorial formulations; no established diagnosis, measured AI effect, or validated instrument is asserted.",
      "references": [
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "editorial-background",
          "locator": "Source-monitoring framework",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "synthetic-media",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synthetic-media"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "limitation": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "references": [
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "core-concept",
          "locator": "Technical approaches: detection, watermarking, and provenance",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "synthetic-media-forensics",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#synthetic-media-forensics"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "system-instruction",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#system-instruction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Role-labeled messages can be serialized into model input through templates.",
      "limitation": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "references": [
        {
          "id": "hfChat",
          "title": "Transformers — Chat templates",
          "url": "https://huggingface.co/docs/transformers/en/chat_templating",
          "category": "P",
          "role": "limited-context",
          "locator": "Role/content messages and serialized chat templates",
          "scope": "Role/content messages and conversion to a model’s serialized input. This does not document a universal conversation export or revision graph.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "task-graph",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#task-graph"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "editorial",
      "unresolved": true,
      "claim_supported": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "limitation": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "editorial-background",
          "locator": "§3: forensic process; §7: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "editorial-background",
          "locator": "§5: provenance relationships",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "temperature",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#temperature"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Documented generation controls and output delivery behavior.",
      "limitation": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "references": [
        {
          "id": "hfGeneration",
          "title": "Transformers — GenerationConfig and generation",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/text_generation",
          "category": "P",
          "role": "core-concept",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers",
          "scope": "Documented temperature, top-p, stopping, generation configuration, and streaming interfaces. These semantics apply to the documented implementation, not every hosted service.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "temporal-artifact",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#temporal-artifact"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Manipulation categories and their evaluation provide bounded media context.",
      "limitation": "A temporal pattern can have ordinary encoding or capture causes; the benchmark does not validate every such observation.",
      "references": [
        {
          "id": "faceManipulationResearch",
          "title": "FaceForensics++: Learning to Detect Manipulated Facial Images (Rössler et al.)",
          "url": "https://arxiv.org/abs/1901.08971",
          "category": "R",
          "role": "limited-context",
          "locator": "§3: facial manipulation; §4: evaluation under compression",
          "scope": "Facial-manipulation categories and a benchmark under stated compression/evaluation conditions. Findings do not establish performance on every case object.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "text-to-image-generation",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#text-to-image-generation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Latent representation and text-conditioned image synthesis in the studied architecture.",
      "limitation": "An acquired latent or image does not identify its whole creation history.",
      "references": [
        {
          "id": "latentDiffusionResearch",
          "title": "High-Resolution Image Synthesis with Latent Diffusion Models (Rombach et al.)",
          "url": "https://arxiv.org/abs/2112.10752",
          "category": "R",
          "role": "core-concept",
          "locator": "§3: latent diffusion and conditioning",
          "scope": "Latent-space diffusion and conditional image synthesis in the paper’s models. Results are bounded by its experiments.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "text-to-speech",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#text-to-speech"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Synthesis of speech and resemblance to a supplied speaker representation.",
      "limitation": "The method does not identify an operator or establish authorization to use a voice.",
      "references": [
        {
          "id": "speechSynthesisResearch",
          "title": "Neural Codec Language Models are Zero-Shot Text to Speech Synthesizers (Wang et al.)",
          "url": "https://arxiv.org/abs/2301.02111",
          "category": "R",
          "role": "core-concept",
          "locator": "Abstract and method: text synthesis conditioned on an acoustic prompt",
          "scope": "A text-to-speech method conditioned on an acoustic prompt. Voice resemblance is not operator identity or consent.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "timeline-reconstruction",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#timeline-reconstruction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Recorded file times and correlation across time representations.",
      "limitation": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "timestamp",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#timestamp"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Recorded file times and correlation across time representations.",
      "limitation": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "timestamp-authority",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#timestamp-authority"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A signed time statement under a timestamp-authority protocol.",
      "limitation": "Ordinary file times are different; trust and applicable protocol updates must be evaluated.",
      "references": [
        {
          "id": "timestamp",
          "title": "RFC 3161: Time-Stamp Protocol",
          "url": "https://www.rfc-editor.org/rfc/rfc3161",
          "category": "P",
          "role": "core-concept",
          "locator": "RFC 3161 §2: timestamping requirements and protocol",
          "scope": "A signed time-stamp token protocol. Evaluate the authority, token, and applicable updates; a file’s ordinary timestamp is different.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "timestamp-normalization",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#timestamp-normalization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Recorded file times and correlation across time representations.",
      "limitation": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "token",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#token"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Tokenizer units and configured input-length/truncation behavior.",
      "limitation": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "references": [
        {
          "id": "hfTokenizer",
          "title": "Transformers — Tokenizer",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/tokenizer",
          "category": "P",
          "role": "core-concept",
          "locator": "Encoding, truncation, padding, and model_max_length",
          "scope": "Tokenization, encoding, truncation, and maximum input lengths in the documented tokenizer API. Case-specific tokenizer and context must still be identified.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "tokenization",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#tokenization"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Tokenizer units and configured input-length/truncation behavior.",
      "limitation": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "references": [
        {
          "id": "hfTokenizer",
          "title": "Transformers — Tokenizer",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/tokenizer",
          "category": "P",
          "role": "core-concept",
          "locator": "Encoding, truncation, padding, and model_max_length",
          "scope": "Tokenization, encoding, truncation, and maximum input lengths in the documented tokenizer API. Case-specific tokenizer and context must still be identified.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "tombstone",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#tombstone"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Document reconciliation can transfer revision state and retain an identifier with a deletion marker.",
      "limitation": "This is one documented protocol; actual marker contents and synchronization behavior are product dependent.",
      "references": [
        {
          "id": "couchReplication",
          "title": "CouchDB Replication Protocol",
          "url": "https://docs.couchdb.org/en/stable/replication/protocol.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Replication protocol and change-feed deletion markers",
          "scope": "Document synchronization, revision identifiers, and deletion markers in the replication protocol. Other products may retain or reconcile different state.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "tool-call",
      "original_references": [
        "mcp"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#tool-call"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "limitation": "The protocol does not guarantee durable logs or independent target-system success.",
      "references": [
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "core-concept",
          "locator": "Protocol Messages; Tool Result; error handling",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "tool-invocation",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#tool-invocation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "limitation": "The protocol does not guarantee durable logs or independent target-system success.",
      "references": [
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "core-concept",
          "locator": "Protocol Messages; Tool Result; error handling",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "tool-result",
      "original_references": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#tool-result"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "limitation": "The protocol does not guarantee durable logs or independent target-system success.",
      "references": [
        {
          "id": "mcp",
          "title": "Model Context Protocol: Tools, specification 2025-11-25",
          "url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools",
          "category": "P",
          "role": "core-concept",
          "locator": "Protocol Messages; Tool Result; error handling",
          "scope": "Tool descriptions, calls, and result semantics for the named protocol revision. A protocol definition does not guarantee persistent audit records.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "owaspPromptInjection",
          "title": "LLM01:2025 Prompt Injection",
          "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Direct and indirect prompt-injection risk descriptions. This security reference does not validate the cause of a particular historical agent action.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "top-p-sampling",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#top-p-sampling"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Documented generation controls and output delivery behavior.",
      "limitation": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "references": [
        {
          "id": "hfGeneration",
          "title": "Transformers — GenerationConfig and generation",
          "url": "https://huggingface.co/docs/transformers/en/main_classes/text_generation",
          "category": "P",
          "role": "core-concept",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers",
          "scope": "Documented temperature, top-p, stopping, generation configuration, and streaming interfaces. These semantics apply to the documented implementation, not every hosted service.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "training-data",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#training-data"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "training-run",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#training-run"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Core learning and evaluation concepts as defined by the educational glossary.",
      "limitation": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "references": [
        {
          "id": "mlGlossary",
          "title": "Machine Learning Glossary",
          "url": "https://developers.google.com/machine-learning/glossary",
          "category": "P",
          "role": "core-concept",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning",
          "scope": "Named entries for models, training, embeddings, hyperparameters, generative AI, and evaluation. This is vendor educational terminology, not forensic standardization.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "transaction",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#transaction"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A grouped database operation with commitment or rollback semantics.",
      "limitation": "Inspect the actual engine and durability settings; an application log is not proof of commitment.",
      "references": [
        {
          "id": "indexedDbSpec",
          "title": "Indexed Database API 3.0",
          "url": "https://www.w3.org/TR/IndexedDB/",
          "category": "P",
          "role": "core-concept",
          "locator": "Transactions",
          "scope": "Database, object-store, key, and transaction semantics. The checked publication is a specification draft; no claim that a particular application retains conversations is supported.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§7.1.4: application data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "transcoding",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#transcoding"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Frame-based encoding and codec conversion provide technical context.",
      "limitation": "Presentation rate, frame timestamps, retained metadata, and conversion effects need format-specific examination.",
      "references": [
        {
          "id": "videoCodecs",
          "title": "Web video codec guide",
          "url": "https://developer.mozilla.org/en-US/docs/Web/Media/Guides/Formats/Video_codecs",
          "category": "P",
          "role": "limited-context",
          "locator": "Encoding, frame types, and compression",
          "scope": "Encoding, inter-frame references, and compression artifacts. A temporal inconsistency is not by itself proof of generation.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "transformation-history",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#transformation-history"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Relationships between a source entity and derived or revised entities.",
      "limitation": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.2: derivation, revision, quotation, and primary source",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "trust-anchor",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#trust-anchor"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "limitation": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "references": [
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "core-concept",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "trust-store",
      "original_references": [
        "prov"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#trust-store"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Validation depends on configured accepted trust inputs.",
      "limitation": "The storage and management of a particular trust store are implementation specific.",
      "references": [
        {
          "id": "x509",
          "title": "RFC 5280 — Internet X.509 PKI Certificate and CRL Profile",
          "url": "https://www.rfc-editor.org/rfc/rfc5280.html",
          "category": "P",
          "role": "limited-context",
          "locator": "§6.1.1: trust-anchor information and validation inputs",
          "scope": "Sections 4–6 cover certificates, revocation lists, trust anchors, and path validation. Key/certificate assertions and human identity remain distinct.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "trusted-timestamp",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#trusted-timestamp"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "A signed time statement under a timestamp-authority protocol.",
      "limitation": "Ordinary file times are different; trust and applicable protocol updates must be evaluated.",
      "references": [
        {
          "id": "timestamp",
          "title": "RFC 3161: Time-Stamp Protocol",
          "url": "https://www.rfc-editor.org/rfc/rfc3161",
          "category": "P",
          "role": "core-concept",
          "locator": "RFC 3161 §2: timestamping requirements and protocol",
          "scope": "A signed time-stamp token protocol. Evaluate the authority, token, and applicable updates; a file’s ordinary timestamp is different.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "unallocated-space",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#unallocated-space"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Allocated slack, unallocated regions, and residual file data.",
      "limitation": "Logical application deletion and physical recovery are separate; recovery is not guaranteed.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.1.2–4.1.3: filesystems, free space, slack, and residual data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "unknown-source-rejection",
      "original_references": [
        "aiRmf",
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#unknown-source-rejection"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Unseen-category rejection provides methodological context for withholding a candidate label.",
      "limitation": "The recognition study is not validation of generative-model attribution or source identification from output style.",
      "references": [
        {
          "id": "openWorldResearch",
          "title": "Towards Open World Recognition (Bendale & Boult)",
          "url": "https://arxiv.org/abs/1412.5687",
          "category": "R",
          "role": "limited-context",
          "locator": "Open-world problem definition and evaluation",
          "scope": "Recognition and evaluation with unseen categories. Background for unknown-source rejection, not a validated method for identifying generative models from their outputs.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "aiRmf",
          "title": "AI Risk Management Framework",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.",
          "checked_at": "2026-10-01"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "upload-event",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#upload-event"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Requests and transfers have protocol and authorization context.",
      "limitation": "An attempted request is not a completed transfer; labeling a transfer unauthorized requires the applicable policy and evidence.",
      "references": [
        {
          "id": "httpSemantics",
          "title": "RFC 9110 — HTTP Semantics",
          "url": "https://www.rfc-editor.org/rfc/rfc9110.html",
          "category": "P",
          "role": "limited-context",
          "locator": "§6: messages; §9: methods",
          "scope": "Sections 6, 8, 9.2.2, and 15.3.3 cover messages, representations, idempotency, retries, and accepted requests. HTTP semantics do not guarantee every agent tool has the same behavior.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist53",
          "title": "NIST SP 800-53 Rev. 5 — control catalog",
          "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "AC-3: access enforcement",
          "scope": "AC-3/AC-6, AU-3/AU-8/AU-12, SC-39, PT-3, and SI-12 supply access, audit, isolation, purpose, and retention context. Cited PDF includes December 2020 updates; controls are not evidence that a system implements them.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "upscaling",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#upscaling"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Image dimensions can be increased using documented resampling procedures.",
      "limitation": "Increased dimensions do not guarantee recovered physical detail.",
      "references": [
        {
          "id": "resamplingDoc",
          "title": "Pillow — image concepts and resampling",
          "url": "https://pillow.readthedocs.io/en/stable/handbook/concepts.html",
          "category": "P",
          "role": "core-concept",
          "locator": "Size and filters",
          "scope": "Image modes, dimensions, and resampling filters. Resampling does not authenticate newly represented detail.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "user-message",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#user-message"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Role-labeled messages can be serialized into model input through templates.",
      "limitation": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "references": [
        {
          "id": "hfChat",
          "title": "Transformers — Chat templates",
          "url": "https://huggingface.co/docs/transformers/en/chat_templating",
          "category": "P",
          "role": "limited-context",
          "locator": "Role/content messages and serialized chat templates",
          "scope": "Role/content messages and conversion to a model’s serialized input. This does not document a universal conversation export or revision graph.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "validation",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#validation"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "partial",
      "unresolved": true,
      "claim_supported": "Documented repeatable procedures and evaluation of tool results.",
      "limitation": "This source does not experimentally validate this glossary, an AI detector, or an application interpretation.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "limited-context",
          "locator": "§4.2.1: imaging documentation and forensic-tool testing",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "vector-database",
      "original_references": [
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#vector-database"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Stored vectors can be queried using defined distance operations.",
      "limitation": "One extension’s semantics do not establish the schema or behavior of a different product.",
      "references": [
        {
          "id": "vectorDb",
          "title": "pgvector — vector similarity search",
          "url": "https://github.com/pgvector/pgvector",
          "category": "P",
          "role": "core-concept",
          "locator": "Storing vectors and querying nearest neighbors",
          "scope": "Vector storage and distance-based querying in one database extension. Does not describe the storage schema of an AI application.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sourceMonitoring",
          "title": "Source monitoring (Johnson, Hashtroudi & Lindsay, 1993)",
          "url": "https://memlab.yale.edu/sites/default/files/files/1993_Johnson_Hashtroudi_Lindsay_PsychBull.pdf",
          "category": "R",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Original source-monitoring framework, Psychological Bulletin 114(1), 3–28, doi:10.1037/0033-2909.114.1.3. General memory-source theory, not empirical validation of AI-specific effects.",
          "checked_at": "2026-10-05"
        }
      ]
    },
    {
      "term_id": "version-history",
      "original_references": [
        "prov",
        "c2pa",
        "hash"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#version-history"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Relationships between a source entity and derived or revised entities.",
      "limitation": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "references": [
        {
          "id": "prov",
          "title": "PROV-DM: The PROV Data Model",
          "url": "https://www.w3.org/TR/prov-dm/",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.2: derivation, revision, quotation, and primary source",
          "scope": "A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "hash",
          "title": "FIPS 180-4: Secure Hash Standard",
          "url": "https://csrc.nist.gov/pubs/fips/180-4/upd1/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.",
          "checked_at": "2026-10-01"
        }
      ]
    },
    {
      "term_id": "voice-cloning",
      "original_references": [
        "nist86"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#voice-cloning"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Synthesis of speech and resemblance to a supplied speaker representation.",
      "limitation": "The method does not identify an operator or establish authorization to use a voice.",
      "references": [
        {
          "id": "speechSynthesisResearch",
          "title": "Neural Codec Language Models are Zero-Shot Text to Speech Synthesizers (Wang et al.)",
          "url": "https://arxiv.org/abs/2301.02111",
          "category": "R",
          "role": "core-concept",
          "locator": "Abstract and method: text synthesis conditioned on an acoustic prompt",
          "scope": "A text-to-speech method conditioned on an acoustic prompt. Voice resemblance is not operator identity or consent.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "voice-conversion",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#voice-conversion"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Transforming voice characteristics from supplied speech.",
      "limitation": "This is one conversion family; other speech-to-speech tasks and forensic attribution need separate evidence.",
      "references": [
        {
          "id": "voiceConversionResearch",
          "title": "AutoVC: Zero-Shot Voice Style Transfer with Only Autoencoder Loss (Qian et al., 2019)",
          "url": "https://proceedings.mlr.press/v97/qian19c.html",
          "category": "R",
          "role": "core-concept",
          "locator": "§2–3: related methods and AutoVC",
          "scope": "The paper’s voice-conversion method. General speech transformations and case-specific voice attribution need separate evidence.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "volatile-evidence",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#volatile-evidence"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Running-system collection and information that can change or disappear.",
      "limitation": "Available evidence and collection effects require environment-specific validation.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§5.1.2: volatile data; §5.2.1: collecting volatile OS data",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "watermark",
      "original_references": [
        "nistSynthetic"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#watermark"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "limitation": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "references": [
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "core-concept",
          "locator": "Technical approaches: detection, watermarking, and provenance",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "waveform",
      "original_references": [
        "nistSynthetic",
        "c2pa"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#waveform"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Audio sample timing and time-domain representations.",
      "limitation": "Recording quality and attribution are outside the API specification.",
      "references": [
        {
          "id": "webAudioSpec",
          "title": "Web Audio API 1.0",
          "url": "https://www.w3.org/TR/webaudio-1.0/",
          "category": "P",
          "role": "core-concept",
          "locator": "AudioBuffer; AnalyserNode time-domain data",
          "scope": "AudioBuffer sample-rate/channel data and time-domain/frequency-domain analysis. Web API semantics do not validate speaker identity.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nistSynthetic",
          "title": "NIST AI 100-4: Reducing Risks Posed by Synthetic Content",
          "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "c2pa",
          "title": "C2PA Specifications 2.4",
          "url": "https://spec.c2pa.org/specifications/specifications/2.4/index.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.",
          "checked_at": "2026-10-09"
        }
      ]
    },
    {
      "term_id": "write-blocker",
      "original_references": [
        "nist86",
        "sqlite"
      ],
      "definition_provenance": {
        "category": "E",
        "publisher": "Synthetic Forensics",
        "revision": "1.1.0",
        "url": "https://syntheticforensics.org/glossary/#write-blocker"
      },
      "assessed_on": "2026-10-14",
      "assessment_revision": "1.1.0-citation-review-1",
      "assessment_method": "Source comparison; independent expert review is not asserted.",
      "support_scope": "Core concept only; application-specific guidance and hypothetical examples are editorial.",
      "support_status": "verified",
      "unresolved": false,
      "claim_supported": "Hardware/software protection against specified writes.",
      "limitation": "A write restriction is scoped to its interface; the surrounding running environment can still change.",
      "references": [
        {
          "id": "nist86Full",
          "title": "NIST SP 800-86 — full publication",
          "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf",
          "category": "P",
          "role": "core-concept",
          "locator": "§4.2.1: preventing writes during acquisition",
          "scope": "Sections 3–8 and Appendix B cover collection, handling, files, operating systems, applications, and correlation. Published August 2006; AI-specific terminology is not defined here.",
          "checked_at": "2026-10-14"
        },
        {
          "id": "nist86",
          "title": "NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response",
          "url": "https://csrc.nist.gov/pubs/sp/800/86/final",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.",
          "checked_at": "2026-10-09"
        },
        {
          "id": "sqlite",
          "title": "SQLite: Write-Ahead Logging",
          "url": "https://www.sqlite.org/wal.html",
          "category": "P",
          "role": "retained-background",
          "locator": "Original reference retained; source scope applies.",
          "scope": "Database, WAL, checkpoint, and associated shared-memory behavior. General SQLite behavior is not proof of an AI application’s storage design.",
          "checked_at": "2026-10-09"
        }
      ]
    }
  ],
  "audit_scope": "Source comparison for every core concept; contextual and editorial limits remain explicit. Not independent expert review."
}