{
  "id": "glossary-editorial",
  "schema_version": "1.0",
  "version": "1.1.0-citation-review-1",
  "published": "2026-10-09",
  "updated": "2026-10-14",
  "last_reviewed": null,
  "canonical_url": "https://syntheticforensics.org/data/glossary-editorial.json",
  "license": "CC-BY-4.0",
  "items": [
    {
      "id": "account-attribution",
      "slug": "account-attribution",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "supportLimit": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§6.4.4: attacker identification and limitations"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and verification"
        }
      ]
    },
    {
      "id": "account-takeover",
      "slug": "account-takeover",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "authentication",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "supportLimit": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "authentication",
          "locator": "Authenticator types; authentication processes; §5: session management"
        },
        {
          "source": "identityProofing",
          "locator": "Enrollment and subscriber accounts"
        }
      ]
    },
    {
      "id": "acquisition",
      "slug": "acquisition",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Collection scope, source identification, and documented acquisition.",
      "supportLimit": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation"
        }
      ]
    },
    {
      "id": "acquisition-log",
      "slug": "acquisition-log",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Collection scope, source identification, and documented acquisition.",
      "supportLimit": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation"
        }
      ]
    },
    {
      "id": "agent",
      "slug": "agent",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "mcp"
      ],
      "support": "Agent actions and structured tool interfaces provide context.",
      "supportLimit": "Not every agent uses MCP, and a function schema is not proof of execution.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Agent and action space"
        },
        {
          "source": "mcp",
          "locator": "Tools: tool definitions, inputSchema, and invocation"
        }
      ]
    },
    {
      "id": "agent-forensics",
      "slug": "agent-forensics",
      "aliases": [
        "AI agent forensics"
      ],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/ai-agent-forensics/",
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "mcp"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "agent-task",
      "slug": "agent-task",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Agent actions and structured tool interfaces provide context.",
      "supportLimit": "Not every agent uses MCP, and a function schema is not proof of execution.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Agent and action space"
        },
        {
          "source": "mcp",
          "locator": "Tools: tool definitions, inputSchema, and invocation"
        }
      ]
    },
    {
      "id": "ai-anti-forensics",
      "slug": "ai-anti-forensics",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/ai-anti-forensics/",
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "ai-artifact",
      "slug": "ai-artifact",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "ai-evidence",
      "slug": "ai-evidence",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "ai-provenance",
      "slug": "ai-provenance",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov"
      ],
      "support": "General lineage relationships support recording origins and changes.",
      "supportLimit": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2 and §5.2: provenance relationships and derivation"
        }
      ]
    },
    {
      "id": "api-audit-event",
      "slug": "api-audit-event",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "nist86Full",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Records can describe requests, actor context, timing, and outcomes.",
      "supportLimit": "API payloads and agent traces vary by implementation, and the record set may be incomplete or alterable.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "AU-3: record content; AU-12: audit-record generation"
        },
        {
          "source": "nist86Full",
          "locator": "§7.1.3: application logs"
        }
      ]
    },
    {
      "id": "approval-event",
      "slug": "approval-event",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "supportLimit": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content"
        }
      ]
    },
    {
      "id": "artifact",
      "slug": "artifact",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Distinguishing examined data from analysis and documenting consequential handling.",
      "supportLimit": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.2–3.4: examination, analysis, and reporting"
        }
      ]
    },
    {
      "id": "assertion",
      "slug": "assertion",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov"
      ],
      "support": "Protected provenance assertions and the structure that references them.",
      "supportLimit": "Validation of an assertion is distinct from factual truth and completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§6: assertions; §10: claims; §1.2: scope"
        }
      ]
    },
    {
      "id": "assistant-response",
      "slug": "assistant-response",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfChat",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Role-labeled messages can be serialized into model input through templates.",
      "supportLimit": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfChat",
          "locator": "Role/content messages and serialized chat templates"
        }
      ]
    },
    {
      "id": "asynchronous-operation",
      "slug": "asynchronous-operation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "httpSemantics",
        "pythonAsync",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Acceptance/dispatch and later completion can be distinct events.",
      "supportLimit": "The actual tool’s lifecycle and persistence guarantees must be established separately.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "httpSemantics",
          "locator": "§15.3.3: 202 Accepted"
        },
        {
          "source": "pythonAsync",
          "locator": "Task completion and awaiting"
        }
      ]
    },
    {
      "id": "attachment",
      "slug": "attachment",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "attribution",
      "slug": "attribution",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "identityProofing",
        "nist86"
      ],
      "support": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "supportLimit": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§6.4.4: attacker identification and limitations"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and verification"
        }
      ]
    },
    {
      "id": "audio-spoofing",
      "slug": "audio-spoofing",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "asvSpoofResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Replay, synthesis, and conversion are distinct speech-spoofing conditions.",
      "supportLimit": "The evaluated recordings and simulated replay conditions do not establish how a case recording was created.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "asvSpoofResearch",
          "locator": "Database design: logical and physical access scenarios"
        }
      ]
    },
    {
      "id": "audio-synthesis",
      "slug": "audio-synthesis",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "supportLimit": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nistSynthetic",
          "locator": "Technical approaches: detection, watermarking, and provenance"
        }
      ]
    },
    {
      "id": "audit-trail",
      "slug": "audit-trail",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Records can describe requests, actor context, timing, and outcomes.",
      "supportLimit": "API payloads and agent traces vary by implementation, and the record set may be incomplete or alterable.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "AU-3: record content; AU-12: audit-record generation"
        },
        {
          "source": "nist86Full",
          "locator": "§7.1.3: application logs"
        }
      ]
    },
    {
      "id": "authentication-event",
      "slug": "authentication-event",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "authentication",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "supportLimit": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "authentication",
          "locator": "Authenticator types; authentication processes; §5: session management"
        },
        {
          "source": "identityProofing",
          "locator": "Enrollment and subscriber accounts"
        }
      ]
    },
    {
      "id": "authenticity",
      "slug": "authenticity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov"
      ],
      "support": "Integrity/trust evaluation is bounded to recorded assertions and their association with content.",
      "supportLimit": "The proposition-based authenticity definition is editorial and extends beyond C2PA validation.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§1.2: scope; §14: trust model"
        }
      ]
    },
    {
      "id": "authenticity-calibration",
      "slug": "authenticity-calibration",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sourceMonitoring"
      ],
      "support": "General source-memory theory supplies background only.",
      "supportLimit": "These operational/working concepts are project editorial formulations; no established diagnosis, measured AI effect, or validated instrument is asserted.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sourceMonitoring",
          "locator": "Source-monitoring framework"
        }
      ]
    },
    {
      "id": "authorization-context",
      "slug": "authorization-context",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "supportLimit": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content"
        }
      ]
    },
    {
      "id": "automation-bias",
      "slug": "automation-bias",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "automationBiasResearch",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Reliance on automated guidance is studied under defined task conditions.",
      "supportLimit": "No AI-specific effect or finding about an individual user is established by this report.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "automationBiasResearch",
          "locator": "Decision-aid reliance and task experiments"
        }
      ]
    },
    {
      "id": "base-model",
      "slug": "base-model",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "benchmark",
      "slug": "benchmark",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "distributionResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Evaluation populations and changed data conditions can affect measured performance.",
      "supportLimit": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "distributionResearch",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations"
        }
      ]
    },
    {
      "id": "biometric-comparison",
      "slug": "biometric-comparison",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "identityProofing",
        "authentication",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Claimed identities and defined checks against supplied evidence or presentations.",
      "supportLimit": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "identityProofing",
          "locator": "Identity proofing, validation, verification, and biometrics"
        },
        {
          "source": "authentication",
          "locator": "§3.2.3: biometrics and presentation attacks"
        }
      ]
    },
    {
      "id": "bit-depth",
      "slug": "bit-depth",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pngSpec",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Sample bit depth and lossless PNG representation.",
      "supportLimit": "The underlying signal, model precision, and other formats require their own semantics.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pngSpec",
          "locator": "Definitions; sample representation; image data encoding"
        }
      ]
    },
    {
      "id": "bitstream-image",
      "slug": "bitstream-image",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Imaging, retained source evidence, working copies, and recorded handling.",
      "supportLimit": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging"
        }
      ]
    },
    {
      "id": "branch",
      "slug": "branch",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "browser-history",
      "slug": "browser-history",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "storageSpec",
        "nist86",
        "sqlite"
      ],
      "support": "Browser/application retention, navigation records, and storage lifetime.",
      "supportLimit": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§7.1.3: logs; §7.2.2: web usage"
        },
        {
          "source": "storageSpec",
          "locator": "Persistence and storage clearing"
        }
      ]
    },
    {
      "id": "browser-storage",
      "slug": "browser-storage",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "storageSpec",
        "nist86",
        "sqlite"
      ],
      "support": "Multiple browser storage mechanisms with defined scope and lifetime rules.",
      "supportLimit": "A storage API does not demonstrate that a particular application retains messages there.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "storageSpec",
          "locator": "Storage endpoints, storage keys, and persistence"
        }
      ]
    },
    {
      "id": "c2pa",
      "slug": "c2pa",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "C2PA provenance structures and associated content records.",
      "supportLimit": "Validation does not establish factual truth, full history, or consent.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§2.3: core terms; §10–11: claims and manifests"
        }
      ]
    },
    {
      "id": "c2pa-claim",
      "slug": "c2pa-claim",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Protected provenance assertions and the structure that references them.",
      "supportLimit": "Validation of an assertion is distinct from factual truth and completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§6: assertions; §10: claims; §1.2: scope"
        }
      ]
    },
    {
      "id": "c2pa-ingredient",
      "slug": "c2pa-ingredient",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "An input asset represented in a C2PA provenance relationship.",
      "supportLimit": "An ingredient reference does not by itself recover or verify every earlier input.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§18.16: ingredient assertions"
        }
      ]
    },
    {
      "id": "c2pa-manifest",
      "slug": "c2pa-manifest",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/c2pa-manifest/",
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "C2PA provenance structures and associated content records.",
      "supportLimit": "Validation does not establish factual truth, full history, or consent.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§2.3: core terms; §10–11: claims and manifests"
        }
      ]
    },
    {
      "id": "cache",
      "slug": "cache",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "storageSpec",
        "nist86",
        "sqlite"
      ],
      "support": "Browser/application retention, navigation records, and storage lifetime.",
      "supportLimit": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§7.1.3: logs; §7.2.2: web usage"
        },
        {
          "source": "storageSpec",
          "locator": "Persistence and storage clearing"
        }
      ]
    },
    {
      "id": "calibration",
      "slug": "calibration",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "calibrationResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Agreement between reported confidence and observed correctness under an evaluation.",
      "supportLimit": "The classification study does not calibrate a particular forensic detector or a person’s confidence.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "calibrationResearch",
          "locator": "Confidence calibration problem and evaluated methods"
        }
      ]
    },
    {
      "id": "canonicalization",
      "slug": "canonicalization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "jcs",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "A defined representation can support reproducible signing or comparison.",
      "supportLimit": "JCS is one scheme; applying it to another format without its rules is unsupported.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "jcs",
          "locator": "§3: deterministic JSON representation"
        }
      ]
    },
    {
      "id": "certificate",
      "slug": "certificate",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "x509",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "supportLimit": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "x509",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation"
        }
      ]
    },
    {
      "id": "certificate-chain",
      "slug": "certificate-chain",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "x509",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "supportLimit": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "x509",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation"
        }
      ]
    },
    {
      "id": "chain-of-custody",
      "slug": "chain-of-custody",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/chain-of-custody/",
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Imaging, retained source evidence, working copies, and recorded handling.",
      "supportLimit": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging"
        }
      ]
    },
    {
      "id": "cloud-export",
      "slug": "cloud-export",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86",
        "sqlite"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "codec",
      "slug": "codec",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mediaFormats",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "The distinction between streams’ encoding methods and their containing formats.",
      "supportLimit": "Format recognition alone does not validate a whole file or identify its source.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mediaFormats",
          "locator": "Container formats and codecs"
        }
      ]
    },
    {
      "id": "collection-scope",
      "slug": "collection-scope",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Collection scope, source identification, and documented acquisition.",
      "supportLimit": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation"
        }
      ]
    },
    {
      "id": "command-execution",
      "slug": "command-execution",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pythonProcess",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Process invocation and distinct outcome/output representations.",
      "supportLimit": "Process success can be narrower than the intended application or external-system effect.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pythonProcess",
          "locator": "Popen; returncode; stdout; stderr"
        }
      ]
    },
    {
      "id": "competing-hypothesis",
      "slug": "competing-hypothesis",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "supportLimit": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources"
        }
      ]
    },
    {
      "id": "completion-status",
      "slug": "completion-status",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfGeneration",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Documented generation controls and output delivery behavior.",
      "supportLimit": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfGeneration",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers"
        }
      ]
    },
    {
      "id": "concept-drift",
      "slug": "concept-drift",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "conceptDriftResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "A predictive relationship can change over time and be examined through conditional-distribution comparisons.",
      "supportLimit": "The study’s metric does not establish a universal drift detector or identify the cause of a case-specific change.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "conceptDriftResearch",
          "locator": "Conditional-distribution discrepancies and concept-drift application"
        }
      ]
    },
    {
      "id": "confabulation",
      "slug": "confabulation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nistGenAI",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "A generative AI risk involving confidently expressed erroneous content.",
      "supportLimit": "The glossary’s broad usage is context dependent; this is not a human clinical diagnosis or proof of deception.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nistGenAI",
          "locator": "§2.2: confabulation"
        }
      ]
    },
    {
      "id": "confidence-statement",
      "slug": "confidence-statement",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "supportLimit": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources"
        }
      ]
    },
    {
      "id": "confusion-matrix",
      "slug": "confusion-matrix",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "content-address",
      "slug": "content-address",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "ipfsCids",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "A content identifier depends on hashing and representation.",
      "supportLimit": "An IPFS CID need not equal the SHA-256 digest of the raw file; it does not authenticate a source.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "ipfsCids",
          "locator": "Content identifiers and content addressing"
        }
      ]
    },
    {
      "id": "content-credentials",
      "slug": "content-credentials",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/content-credentials/",
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov"
      ],
      "support": "C2PA provenance structures and associated content records.",
      "supportLimit": "Validation does not establish factual truth, full history, or consent.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§2.3: core terms; §10–11: claims and manifests"
        }
      ]
    },
    {
      "id": "content-provenance",
      "slug": "content-provenance",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov"
      ],
      "support": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "supportLimit": "A provenance description is not independent proof that each relationship occurred.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships"
        }
      ]
    },
    {
      "id": "context-summarization",
      "slug": "context-summarization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfTokenizer",
        "hfChat",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Bounded inputs provide context for application-defined summaries.",
      "supportLimit": "The source does not establish a universal summarization algorithm or the text supplied to a particular run.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfTokenizer",
          "locator": "Input length and truncation"
        },
        {
          "source": "hfChat",
          "locator": "Serialized conversational input"
        }
      ]
    },
    {
      "id": "context-truncation",
      "slug": "context-truncation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfTokenizer",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Tokenizer units and configured input-length/truncation behavior.",
      "supportLimit": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfTokenizer",
          "locator": "Encoding, truncation, padding, and model_max_length"
        }
      ]
    },
    {
      "id": "context-window",
      "slug": "context-window",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfTokenizer",
        "nist86"
      ],
      "support": "Tokenizer units and configured input-length/truncation behavior.",
      "supportLimit": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfTokenizer",
          "locator": "Encoding, truncation, padding, and model_max_length"
        }
      ]
    },
    {
      "id": "conversation-branch",
      "slug": "conversation-branch",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "conversation-export",
      "slug": "conversation-export",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "conversation-graph",
      "slug": "conversation-graph",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/conversation-graph/",
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "cookie",
      "slug": "cookie",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "httpCookies",
        "nist86",
        "sqlite"
      ],
      "support": "Cookie storage and request association under domain/path/attribute rules.",
      "supportLimit": "A cookie or session credential does not establish human identity.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "httpCookies",
          "locator": "§4.1.2: cookie attributes; §5.3: storage model"
        }
      ]
    },
    {
      "id": "correlation",
      "slug": "correlation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "mcp"
      ],
      "support": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "supportLimit": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources"
        }
      ]
    },
    {
      "id": "corroboration",
      "slug": "corroboration",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "mcp"
      ],
      "support": "Analysis across sources and reporting the basis and limitations of conclusions.",
      "supportLimit": "The project’s independence tests, competing-hypothesis formulation, and confidence language need case-specific justification.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.3–3.4; §8: analysis, reporting, and multiple sources"
        }
      ]
    },
    {
      "id": "credential-verification",
      "slug": "credential-verification",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "authentication",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "supportLimit": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "authentication",
          "locator": "Authenticator types; authentication processes; §5: session management"
        },
        {
          "source": "identityProofing",
          "locator": "Enrollment and subscriber accounts"
        }
      ]
    },
    {
      "id": "cryptographic-signature",
      "slug": "cryptographic-signature",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "digitalSignatures",
        "x509",
        "prov"
      ],
      "support": "Keys, signatures, and the certificate assertions used during verification.",
      "supportLimit": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "digitalSignatures",
          "locator": "FIPS 186-5: signature generation and verification"
        },
        {
          "source": "x509",
          "locator": "§4.1: certificate and subject public-key information"
        }
      ]
    },
    {
      "id": "custody-transfer",
      "slug": "custody-transfer",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Imaging, retained source evidence, working copies, and recorded handling.",
      "supportLimit": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging"
        }
      ]
    },
    {
      "id": "data-leakage",
      "slug": "data-leakage",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnPitfalls",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Information crossing a training/evaluation boundary can invalidate an evaluation claim.",
      "supportLimit": "Determining leakage in a particular corpus requires its actual collection and transformation records.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnPitfalls",
          "locator": "Data leakage"
        }
      ]
    },
    {
      "id": "data-minimization",
      "slug": "data-minimization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "nist86",
        "sqlite"
      ],
      "support": "Purpose-bounded processing and controlled disclosure/retention of information.",
      "supportLimit": "The project’s evidence-report redaction practice is an editorial application, not a universal legal rule.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "PT-3: processing purposes; SI-12: information management"
        }
      ]
    },
    {
      "id": "database-checkpoint",
      "slug": "database-checkpoint",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sqlite",
        "nist86"
      ],
      "support": "Committed SQLite changes in a WAL and their transfer during checkpointing.",
      "supportLimit": "Evidence significance depends on acquisition consistency and the actual application configuration.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sqlite",
          "locator": "§2: how WAL works; §2.1: checkpointing"
        }
      ]
    },
    {
      "id": "database-journal",
      "slug": "database-journal",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sqlite",
        "nist86Full",
        "nist86"
      ],
      "support": "A concrete transactional journal implementation and its relationship to database state.",
      "supportLimit": "Journaling varies by engine; SQLite behavior does not define every database journal.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sqlite",
          "locator": "WAL overview and checkpointing"
        },
        {
          "source": "nist86Full",
          "locator": "§7.1.4: application data"
        }
      ]
    },
    {
      "id": "dataset-provenance",
      "slug": "dataset-provenance",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "datasetSheets",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Dataset-source and processing documentation with stated scope.",
      "supportLimit": "A dataset document can contain unverified assertions or omit history.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "datasetSheets",
          "locator": "Datasheet questions: composition, collection, processing, uses, and maintenance"
        }
      ]
    },
    {
      "id": "deduplication",
      "slug": "deduplication",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hash",
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Byte comparisons can identify repeated representations under a stated rule.",
      "supportLimit": "Similarity-based consolidation and evidence-source independence require separate criteria.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hash",
          "locator": "FIPS 180-4: digests"
        },
        {
          "source": "nist86Full",
          "locator": "§4.3.1: comparing and locating files"
        }
      ]
    },
    {
      "id": "deepfake",
      "slug": "deepfake",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nistSynthetic"
      ],
      "support": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "supportLimit": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nistSynthetic",
          "locator": "Technical approaches: detection, watermarking, and provenance"
        }
      ]
    },
    {
      "id": "delegation",
      "slug": "delegation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "mcp"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "delegation-chain",
      "slug": "delegation-chain",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "deleted-record",
      "slug": "deleted-record",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Allocated slack, unallocated regions, and residual file data.",
      "supportLimit": "Logical application deletion and physical recovery are separate; recovery is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.1.2–4.1.3: filesystems, free space, slack, and residual data"
        }
      ]
    },
    {
      "id": "deployment-identifier",
      "slug": "deployment-identifier",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfConfig",
        "pytorchCheckpoint",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Configuration and inference artifacts can help distinguish deployment states.",
      "supportLimit": "Endpoint aliases, labels, routing, and historical runtime identity need independently acquired records.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfConfig",
          "locator": "Model configuration"
        },
        {
          "source": "pytorchCheckpoint",
          "locator": "Saving and loading for inference"
        }
      ]
    },
    {
      "id": "derivation",
      "slug": "derivation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Relationships between a source entity and derived or revised entities.",
      "supportLimit": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§5.2: derivation, revision, quotation, and primary source"
        }
      ]
    },
    {
      "id": "derived-evidence",
      "slug": "derived-evidence",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "nist86"
      ],
      "support": "Relationships between a source entity and derived or revised entities.",
      "supportLimit": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§5.2: derivation, revision, quotation, and primary source"
        }
      ]
    },
    {
      "id": "detection-threshold",
      "slug": "detection-threshold",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "developer-instruction",
      "slug": "developer-instruction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfChat",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Role-labeled messages can be serialized into model input through templates.",
      "supportLimit": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfChat",
          "locator": "Role/content messages and serialized chat templates"
        }
      ]
    },
    {
      "id": "diffusion-model",
      "slug": "diffusion-model",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "A specified iterative diffusion generation and sampling procedure.",
      "supportLimit": "Sampler names and step parameters vary across implementations; reproduction of a historical result is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusionResearch",
          "locator": "§2–3: diffusion and reverse-process sampling"
        }
      ]
    },
    {
      "id": "digital-evidence",
      "slug": "digital-evidence",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Data examined with preservation, integrity, and a stated investigative purpose.",
      "supportLimit": "The project’s proposition-based phrasing is editorial; the source is IT-oriented guidance, not legal admissibility advice.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§2.1: digital forensics; Appendix B: data and forensic terminology"
        }
      ]
    },
    {
      "id": "digital-persona",
      "slug": "digital-persona",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "syntheticIdentityFraud",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Identity construction and proofing supply background for the project’s broader representation terminology.",
      "supportLimit": "The established fraud definition includes dishonest gain; it does not classify every fictional or AI-generated persona as fraud.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "syntheticIdentityFraud",
          "locator": "Defining the Problem of Synthetic Identity Fraud"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and identity evidence"
        }
      ]
    },
    {
      "id": "digital-provenance",
      "slug": "digital-provenance",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov"
      ],
      "support": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "supportLimit": "A provenance description is not independent proof that each relationship occurred.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships"
        }
      ]
    },
    {
      "id": "disk-image",
      "slug": "disk-image",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Imaging, retained source evidence, working copies, and recorded handling.",
      "supportLimit": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging"
        }
      ]
    },
    {
      "id": "distribution-shift",
      "slug": "distribution-shift",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "distributionResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Evaluation populations and changed data conditions can affect measured performance.",
      "supportLimit": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "distributionResearch",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations"
        }
      ]
    },
    {
      "id": "domain-shift",
      "slug": "domain-shift",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "distributionResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Evaluation populations and changed data conditions can affect measured performance.",
      "supportLimit": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "distributionResearch",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations"
        }
      ]
    },
    {
      "id": "email-verification",
      "slug": "email-verification",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "authentication",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "supportLimit": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "authentication",
          "locator": "Authenticator types; authentication processes; §5: session management"
        },
        {
          "source": "identityProofing",
          "locator": "Enrollment and subscriber accounts"
        }
      ]
    },
    {
      "id": "embedded-manifest",
      "slug": "embedded-manifest",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "C2PA provenance structures and associated content records.",
      "supportLimit": "Validation does not establish factual truth, full history, or consent.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§2.3: core terms; §10–11: claims and manifests"
        }
      ]
    },
    {
      "id": "embedding",
      "slug": "embedding",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "transformerResearch",
        "aiRmf"
      ],
      "support": "Language sequences and numerical representations have documented model contexts.",
      "supportLimit": "A Transformer paper is not a complete definition of every LLM or multimodal deployment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: large language model, multimodal, embedding"
        },
        {
          "source": "transformerResearch",
          "locator": "§3: model architecture and embeddings"
        }
      ]
    },
    {
      "id": "evaluation-dataset",
      "slug": "evaluation-dataset",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "distributionResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Evaluation populations and changed data conditions can affect measured performance.",
      "supportLimit": "The cited datasets do not establish reliability of an AI artifact attribution method.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "distributionResearch",
          "locator": "Benchmark definition and in-/out-of-distribution evaluations"
        }
      ]
    },
    {
      "id": "evidence-contamination",
      "slug": "evidence-contamination",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Distinguishing examined data from analysis and documenting consequential handling.",
      "supportLimit": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.2–3.4: examination, analysis, and reporting"
        }
      ]
    },
    {
      "id": "evidence-identifier",
      "slug": "evidence-identifier",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Collection scope, source identification, and documented acquisition.",
      "supportLimit": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation"
        }
      ]
    },
    {
      "id": "evidence-inventory",
      "slug": "evidence-inventory",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Collection scope, source identification, and documented acquisition.",
      "supportLimit": "The source supplies general forensic practice; the AI-export examples are editorial applications.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1: data collection; §3.1.2: acquisition and collection documentation"
        }
      ]
    },
    {
      "id": "evidence-reconstruction",
      "slug": "evidence-reconstruction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Distinguishing examined data from analysis and documenting consequential handling.",
      "supportLimit": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.2–3.4: examination, analysis, and reporting"
        }
      ]
    },
    {
      "id": "execution-trace",
      "slug": "execution-trace",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "nist86Full",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Records can describe requests, actor context, timing, and outcomes.",
      "supportLimit": "API payloads and agent traces vary by implementation, and the record set may be incomplete or alterable.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "AU-3: record content; AU-12: audit-record generation"
        },
        {
          "source": "nist86Full",
          "locator": "§7.1.3: application logs"
        }
      ]
    },
    {
      "id": "exfiltration",
      "slug": "exfiltration",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "httpSemantics",
        "nist53",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Requests and transfers have protocol and authorization context.",
      "supportLimit": "An attempted request is not a completed transfer; labeling a transfer unauthorized requires the applicable policy and evidence.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "httpSemantics",
          "locator": "§6: messages; §9: methods"
        },
        {
          "source": "nist53",
          "locator": "AC-3: access enforcement"
        }
      ]
    },
    {
      "id": "exif-metadata",
      "slug": "exif-metadata",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pngSpec",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "A standard format can carry EXIF metadata for capture/editing context.",
      "supportLimit": "PNG storage is one context; tag meanings and validity in other formats require their specifications.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pngSpec",
          "locator": "eXIf: Exif metadata chunk"
        }
      ]
    },
    {
      "id": "exit-status",
      "slug": "exit-status",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pythonProcess",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Process invocation and distinct outcome/output representations.",
      "supportLimit": "Process success can be narrower than the intended application or external-system effect.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pythonProcess",
          "locator": "Popen; returncode; stdout; stderr"
        }
      ]
    },
    {
      "id": "face-reenactment",
      "slug": "face-reenactment",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "faceReenactmentResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Transfer of facial performance to a target representation.",
      "supportLimit": "The paper’s method is not proof of how a specific video was produced.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "faceReenactmentResearch",
          "locator": "Abstract and §3: reenactment overview"
        }
      ]
    },
    {
      "id": "face-swap",
      "slug": "face-swap",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "faceManipulationResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Manipulation categories and their evaluation provide bounded media context.",
      "supportLimit": "A temporal pattern can have ordinary encoding or capture causes; the benchmark does not validate every such observation.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "faceManipulationResearch",
          "locator": "§3: facial manipulation; §4: evaluation under compression"
        }
      ]
    },
    {
      "id": "false-negative",
      "slug": "false-negative",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "false-positive",
      "slug": "false-positive",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "file-carving",
      "slug": "file-carving",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Locating candidate files through headers and reconstructing available file content.",
      "supportLimit": "A header or candidate recovery is not a complete format validation or an application association.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.3.1–4.3.2: locating and extracting files; file-header comparisons"
        }
      ]
    },
    {
      "id": "file-container",
      "slug": "file-container",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mediaFormats",
        "nist86",
        "sqlite"
      ],
      "support": "The distinction between streams’ encoding methods and their containing formats.",
      "supportLimit": "Format recognition alone does not validate a whole file or identify its source.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mediaFormats",
          "locator": "Container formats and codecs"
        }
      ]
    },
    {
      "id": "file-signature",
      "slug": "file-signature",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Locating candidate files through headers and reconstructing available file content.",
      "supportLimit": "A header or candidate recovery is not a complete format validation or an application association.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.3.1–4.3.2: locating and extracting files; file-header comparisons"
        }
      ]
    },
    {
      "id": "filesystem-metadata",
      "slug": "filesystem-metadata",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Recorded file times and correlation across time representations.",
      "supportLimit": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones"
        }
      ]
    },
    {
      "id": "fine-tuning",
      "slug": "fine-tuning",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "forensic-artifact",
      "slug": "forensic-artifact",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Distinguishing examined data from analysis and documenting consequential handling.",
      "supportLimit": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.2–3.4: examination, analysis, and reporting"
        }
      ]
    },
    {
      "id": "forensic-working-copy",
      "slug": "forensic-working-copy",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Imaging, retained source evidence, working copies, and recorded handling.",
      "supportLimit": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging"
        }
      ]
    },
    {
      "id": "frame-rate",
      "slug": "frame-rate",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "videoCodecs",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Frame-based encoding and codec conversion provide technical context.",
      "supportLimit": "Presentation rate, frame timestamps, retained metadata, and conversion effects need format-specific examination.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "videoCodecs",
          "locator": "Encoding, frame types, and compression"
        }
      ]
    },
    {
      "id": "function-calling",
      "slug": "function-calling",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Agent actions and structured tool interfaces provide context.",
      "supportLimit": "Not every agent uses MCP, and a function schema is not proof of execution.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Agent and action space"
        },
        {
          "source": "mcp",
          "locator": "Tools: tool definitions, inputSchema, and invocation"
        }
      ]
    },
    {
      "id": "generation-seed",
      "slug": "generation-seed",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusersSeeds",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "A seed initializes or controls a documented pseudorandom generator.",
      "supportLimit": "A seed alone is not a complete replay specification; implementation, hardware, and other inputs can matter.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusersSeeds",
          "locator": "Random generators and seeds"
        }
      ]
    },
    {
      "id": "generative-adversarial-network",
      "slug": "generative-adversarial-network",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "ganResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Generator/discriminator training in the stated model framework.",
      "supportLimit": "Output appearance alone cannot identify use of the architecture.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "ganResearch",
          "locator": "§2: adversarial framework"
        }
      ]
    },
    {
      "id": "generative-ai",
      "slug": "generative-ai",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nistSynthetic"
      ],
      "support": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "supportLimit": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nistSynthetic",
          "locator": "Technical approaches: detection, watermarking, and provenance"
        }
      ]
    },
    {
      "id": "generative-artifact",
      "slug": "generative-artifact",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "ground-truth",
      "slug": "ground-truth",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "guidance-scale",
      "slug": "guidance-scale",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusersImage",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Input-image conditioning and named controls are documented for this generation pipeline.",
      "supportLimit": "These are implementation-specific parameter meanings; they do not prove the settings of an unknown historical run.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusersImage",
          "locator": "StableDiffusionImg2ImgPipeline parameters: image, negative_prompt, guidance_scale"
        }
      ]
    },
    {
      "id": "hard-binding",
      "slug": "hard-binding",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Different mechanisms for associating provenance with content.",
      "supportLimit": "Their validity and tolerance are scheme specific; neither guarantees the scene is true.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§9.2–9.3: hard and soft bindings"
        }
      ]
    },
    {
      "id": "hash-collision",
      "slug": "hash-collision",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hash",
        "prov",
        "c2pa"
      ],
      "support": "Hash algorithms, fixed-size digests, and the distinction between input bytes and a digest.",
      "supportLimit": "Algorithm properties alone do not authenticate origin, establish custody, or exclude all collisions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hash",
          "locator": "FIPS 180-4: message digests and SHA-256"
        }
      ]
    },
    {
      "id": "hash-digest",
      "slug": "hash-digest",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hash",
        "nist86",
        "sqlite"
      ],
      "support": "Hash algorithms, fixed-size digests, and the distinction between input bytes and a digest.",
      "supportLimit": "Algorithm properties alone do not authenticate origin, establish custody, or exclude all collisions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hash",
          "locator": "FIPS 180-4: message digests and SHA-256"
        }
      ]
    },
    {
      "id": "hash-verification",
      "slug": "hash-verification",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "hash",
        "nist86",
        "sqlite"
      ],
      "support": "Comparing acquired bytes with a documented reference using digests.",
      "supportLimit": "The result is a bounded byte-integrity statement, not a truth or authorship finding.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.2: data-file integrity and message-digest comparison"
        },
        {
          "source": "hash",
          "locator": "FIPS 180-4: digest algorithms"
        }
      ]
    },
    {
      "id": "human-ai-interaction",
      "slug": "human-ai-interaction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "hyperparameter",
      "slug": "hyperparameter",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "idempotency",
      "slug": "idempotency",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "httpSemantics",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Repeating an operation can preserve its intended effect under the relevant semantics.",
      "supportLimit": "Do not infer idempotency from a method name or apply HTTP guarantees to an unrelated tool.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "httpSemantics",
          "locator": "§9.2.2: idempotent methods and automatic retries"
        }
      ]
    },
    {
      "id": "identity-claim",
      "slug": "identity-claim",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "identityProofing",
        "authentication",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Claimed identities and defined checks against supplied evidence or presentations.",
      "supportLimit": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "identityProofing",
          "locator": "Identity proofing, validation, verification, and biometrics"
        },
        {
          "source": "authentication",
          "locator": "§3.2.3: biometrics and presentation attacks"
        }
      ]
    },
    {
      "id": "identity-fusion",
      "slug": "identity-fusion",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "syntheticIdentityFraud",
        "identityProofing",
        "nist86"
      ],
      "support": "Identity construction and proofing supply background for the project’s broader representation terminology.",
      "supportLimit": "The established fraud definition includes dishonest gain; it does not classify every fictional or AI-generated persona as fraud.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "syntheticIdentityFraud",
          "locator": "Defining the Problem of Synthetic Identity Fraud"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and identity evidence"
        }
      ]
    },
    {
      "id": "identity-linkage",
      "slug": "identity-linkage",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "supportLimit": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§6.4.4: attacker identification and limitations"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and verification"
        }
      ]
    },
    {
      "id": "identity-proofing",
      "slug": "identity-proofing",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "identityProofing",
        "authentication",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Claimed identities and defined checks against supplied evidence or presentations.",
      "supportLimit": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "identityProofing",
          "locator": "Identity proofing, validation, verification, and biometrics"
        },
        {
          "source": "authentication",
          "locator": "§3.2.3: biometrics and presentation attacks"
        }
      ]
    },
    {
      "id": "image-synthesis",
      "slug": "image-synthesis",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "supportLimit": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nistSynthetic",
          "locator": "Technical approaches: detection, watermarking, and provenance"
        }
      ]
    },
    {
      "id": "image-to-image-generation",
      "slug": "image-to-image-generation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusersImage",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Input-image conditioning and named controls are documented for this generation pipeline.",
      "supportLimit": "These are implementation-specific parameter meanings; they do not prove the settings of an unknown historical run.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusersImage",
          "locator": "StableDiffusionImg2ImgPipeline parameters: image, negative_prompt, guidance_scale"
        }
      ]
    },
    {
      "id": "impersonation",
      "slug": "impersonation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "identityProofing",
        "nist86"
      ],
      "support": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "supportLimit": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§6.4.4: attacker identification and limitations"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and verification"
        }
      ]
    },
    {
      "id": "impersonation-artifact",
      "slug": "impersonation-artifact",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "supportLimit": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§6.4.4: attacker identification and limitations"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and verification"
        }
      ]
    },
    {
      "id": "indexeddb",
      "slug": "indexeddb",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "indexedDbSpec",
        "nist86",
        "sqlite"
      ],
      "support": "Structured browser database objects and transactions.",
      "supportLimit": "The cited API 3.0 document is a specification draft; application schema and retention are separate.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "indexedDbSpec",
          "locator": "Database, object store, and transactions"
        }
      ]
    },
    {
      "id": "indirect-prompt-injection",
      "slug": "indirect-prompt-injection",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "owaspPromptInjection",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Instruction influence attempted through an input or encountered material.",
      "supportLimit": "Presence of instructions does not establish compliance or a downstream effect.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "owaspPromptInjection",
          "locator": "Direct and indirect prompt injection"
        }
      ]
    },
    {
      "id": "inference",
      "slug": "inference",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Distinguishing examined data from analysis and documenting consequential handling.",
      "supportLimit": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.2–3.4: examination, analysis, and reporting"
        }
      ]
    },
    {
      "id": "inference-runtime",
      "slug": "inference-runtime",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfConfig",
        "pytorchCheckpoint",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Configuration and inference artifacts can help distinguish deployment states.",
      "supportLimit": "Endpoint aliases, labels, routing, and historical runtime identity need independently acquired records.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfConfig",
          "locator": "Model configuration"
        },
        {
          "source": "pytorchCheckpoint",
          "locator": "Saving and loading for inference"
        }
      ]
    },
    {
      "id": "inpainting",
      "slug": "inpainting",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusersInpaint",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Generation within a specified masked region.",
      "supportLimit": "The result supplies generated content, not independently recovered original detail.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusersInpaint",
          "locator": "Image/mask inputs and masked generation"
        }
      ]
    },
    {
      "id": "integrity",
      "slug": "integrity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "hash",
        "prov"
      ],
      "support": "Comparing acquired bytes with a documented reference using digests.",
      "supportLimit": "The result is a bounded byte-integrity statement, not a truth or authorship finding.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.2: data-file integrity and message-digest comparison"
        },
        {
          "source": "hash",
          "locator": "FIPS 180-4: digest algorithms"
        }
      ]
    },
    {
      "id": "interaction-forensics",
      "slug": "interaction-forensics",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "interpretation",
      "slug": "interpretation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Distinguishing examined data from analysis and documenting consequential handling.",
      "supportLimit": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.2–3.4: examination, analysis, and reporting"
        }
      ]
    },
    {
      "id": "job-queue",
      "slug": "job-queue",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pythonQueue",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Work items can be retained for later processing with specified completion rules.",
      "supportLimit": "A library queue is one implementation; distributed queues may have different delivery guarantees.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pythonQueue",
          "locator": "Queue objects and task tracking"
        }
      ]
    },
    {
      "id": "jpeg-quantization",
      "slug": "jpeg-quantization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "jpegSpec",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Quantization and information reduction in the specified JPEG coding process.",
      "supportLimit": "Lossy transformations affect method-specific signals; they do not by themselves identify AI generation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "jpegSpec",
          "locator": "§3: definitions; Annex A and Annex F: DCT-based processes"
        }
      ]
    },
    {
      "id": "keyframe",
      "slug": "keyframe",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "videoCodecs",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Frame-based encoding and codec conversion provide technical context.",
      "supportLimit": "Presentation rate, frame timestamps, retained metadata, and conversion effects need format-specific examination.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "videoCodecs",
          "locator": "Encoding, frame types, and compression"
        }
      ]
    },
    {
      "id": "large-language-model",
      "slug": "large-language-model",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "transformerResearch",
        "aiRmf"
      ],
      "support": "Language sequences and numerical representations have documented model contexts.",
      "supportLimit": "A Transformer paper is not a complete definition of every LLM or multimodal deployment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: large language model, multimodal, embedding"
        },
        {
          "source": "transformerResearch",
          "locator": "§3: model architecture and embeddings"
        }
      ]
    },
    {
      "id": "latent-representation",
      "slug": "latent-representation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "latentDiffusionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Latent representation and text-conditioned image synthesis in the studied architecture.",
      "supportLimit": "An acquired latent or image does not identify its whole creation history.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "latentDiffusionResearch",
          "locator": "§3: latent diffusion and conditioning"
        }
      ]
    },
    {
      "id": "least-privilege",
      "slug": "least-privilege",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "supportLimit": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content"
        }
      ]
    },
    {
      "id": "lip-synchronization",
      "slug": "lip-synchronization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "lipSyncResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "The relationship between mouth movement and target speech in the studied synthesis task.",
      "supportLimit": "Good alignment does not establish authentic capture or consent.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "lipSyncResearch",
          "locator": "Problem statement and lip-synchronization evaluation"
        }
      ]
    },
    {
      "id": "live-acquisition",
      "slug": "live-acquisition",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Running-system collection and information that can change or disappear.",
      "supportLimit": "Available evidence and collection effects require environment-specific validation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§5.1.2: volatile data; §5.2.1: collecting volatile OS data"
        }
      ]
    },
    {
      "id": "liveness-detection",
      "slug": "liveness-detection",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "identityProofing",
        "authentication",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Claimed identities and defined checks against supplied evidence or presentations.",
      "supportLimit": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "identityProofing",
          "locator": "Identity proofing, validation, verification, and biometrics"
        },
        {
          "source": "authentication",
          "locator": "§3.2.3: biometrics and presentation attacks"
        }
      ]
    },
    {
      "id": "localstorage",
      "slug": "localstorage",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "webStorageSpec",
        "nist86",
        "sqlite"
      ],
      "support": "The web platform’s string key/value stores and their origin/session scope.",
      "supportLimit": "Application-defined sessions are not necessarily browser page sessions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "webStorageSpec",
          "locator": "The sessionStorage and localStorage attributes"
        }
      ]
    },
    {
      "id": "logical-acquisition",
      "slug": "logical-acquisition",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Selection of files rather than a full media image.",
      "supportLimit": "Application and cloud-object acquisition extend beyond the source’s logical-backup example.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.1: logical backup versus bit-stream imaging"
        }
      ]
    },
    {
      "id": "lora",
      "slug": "lora",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "loraResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Trainable low-rank components used to adapt a pretrained model.",
      "supportLimit": "The paper does not prove that a particular acquired deployment used LoRA.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "loraResearch",
          "locator": "§4: low-rank adaptation"
        }
      ]
    },
    {
      "id": "lossless-compression",
      "slug": "lossless-compression",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pngSpec",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Sample bit depth and lossless PNG representation.",
      "supportLimit": "The underlying signal, model precision, and other formats require their own semantics.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pngSpec",
          "locator": "Definitions; sample representation; image data encoding"
        }
      ]
    },
    {
      "id": "lossy-compression",
      "slug": "lossy-compression",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "jpegSpec",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Quantization and information reduction in the specified JPEG coding process.",
      "supportLimit": "Lossy transformations affect method-specific signals; they do not by themselves identify AI generation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "jpegSpec",
          "locator": "§3: definitions; Annex A and Annex F: DCT-based processes"
        }
      ]
    },
    {
      "id": "magic-bytes",
      "slug": "magic-bytes",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Locating candidate files through headers and reconstructing available file content.",
      "supportLimit": "A header or candidate recovery is not a complete format validation or an application association.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.3.1–4.3.2: locating and extracting files; file-header comparisons"
        }
      ]
    },
    {
      "id": "manifest",
      "slug": "manifest",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "slsaProvenance",
        "prov"
      ],
      "support": "Concrete structured records identify claims, inputs, and relationships.",
      "supportLimit": "A generic manifest has format-specific semantics; neither source defines every release manifest.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§10–11: claims and manifests"
        },
        {
          "source": "slsaProvenance",
          "locator": "Provenance schema"
        }
      ]
    },
    {
      "id": "mcp",
      "slug": "mcp",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mcp"
      ],
      "support": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "supportLimit": "The protocol does not guarantee durable logs or independent target-system success.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mcp",
          "locator": "Protocol Messages; Tool Result; error handling"
        }
      ]
    },
    {
      "id": "media-lineage",
      "slug": "media-lineage",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "General lineage relationships support recording origins and changes.",
      "supportLimit": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2 and §5.2: provenance relationships and derivation"
        }
      ]
    },
    {
      "id": "message-identifier",
      "slug": "message-identifier",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "metadata",
      "slug": "metadata",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Recorded file times and correlation across time representations.",
      "supportLimit": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones"
        }
      ]
    },
    {
      "id": "model-adapter",
      "slug": "model-adapter",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "adapterResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "An adaptation component can change behavior while retaining pretrained parameters.",
      "supportLimit": "The paper studies particular NLP adapters, not every modification or deployment.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "adapterResearch",
          "locator": "Adapter architecture and parameter-efficient transfer"
        }
      ]
    },
    {
      "id": "model-attribution",
      "slug": "model-attribution",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/model-attribution/",
      "reviewer": null,
      "sourceIds": [
        "openWorldResearch",
        "aiRmf"
      ],
      "support": "Unseen-category rejection provides methodological context for withholding a candidate label.",
      "supportLimit": "The recognition study is not validation of generative-model attribution or source identification from output style.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "openWorldResearch",
          "locator": "Open-world problem definition and evaluation"
        }
      ]
    },
    {
      "id": "model-checkpoint",
      "slug": "model-checkpoint",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pytorchCheckpoint",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "A saved parameter/training state in a documented framework.",
      "supportLimit": "Checkpoint scope varies; a saved file does not establish use in a particular interaction.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pytorchCheckpoint",
          "locator": "Saving and Loading a General Checkpoint"
        }
      ]
    },
    {
      "id": "model-configuration",
      "slug": "model-configuration",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfConfig",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Settings that instantiate or describe a model.",
      "supportLimit": "A supplied configuration is not independent proof of historical deployment settings.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfConfig",
          "locator": "PretrainedConfig and configuration serialization"
        }
      ]
    },
    {
      "id": "model-forensics",
      "slug": "model-forensics",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "aiRmf"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "model-lineage",
      "slug": "model-lineage",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "aiRmf"
      ],
      "support": "General lineage relationships support recording origins and changes.",
      "supportLimit": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2 and §5.2: provenance relationships and derivation"
        }
      ]
    },
    {
      "id": "model-provenance",
      "slug": "model-provenance",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "aiRmf"
      ],
      "support": "General lineage relationships support recording origins and changes.",
      "supportLimit": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2 and §5.2: provenance relationships and derivation"
        }
      ]
    },
    {
      "id": "model-version",
      "slug": "model-version",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfConfig",
        "pytorchCheckpoint",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Configuration and inference artifacts can help distinguish deployment states.",
      "supportLimit": "Endpoint aliases, labels, routing, and historical runtime identity need independently acquired records.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfConfig",
          "locator": "Model configuration"
        },
        {
          "source": "pytorchCheckpoint",
          "locator": "Saving and loading for inference"
        }
      ]
    },
    {
      "id": "model-weights",
      "slug": "model-weights",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "multi-factor-authentication",
      "slug": "multi-factor-authentication",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "authentication",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "supportLimit": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "authentication",
          "locator": "Authenticator types; authentication processes; §5: session management"
        },
        {
          "source": "identityProofing",
          "locator": "Enrollment and subscriber accounts"
        }
      ]
    },
    {
      "id": "multimodal",
      "slug": "multimodal",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "transformerResearch",
        "nistSynthetic"
      ],
      "support": "Language sequences and numerical representations have documented model contexts.",
      "supportLimit": "A Transformer paper is not a complete definition of every LLM or multimodal deployment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: large language model, multimodal, embedding"
        },
        {
          "source": "transformerResearch",
          "locator": "§3: model architecture and embeddings"
        }
      ]
    },
    {
      "id": "negative-prompt",
      "slug": "negative-prompt",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusersImage",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Input-image conditioning and named controls are documented for this generation pipeline.",
      "supportLimit": "These are implementation-specific parameter meanings; they do not prove the settings of an unknown historical run.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusersImage",
          "locator": "StableDiffusionImg2ImgPipeline parameters: image, negative_prompt, guidance_scale"
        }
      ]
    },
    {
      "id": "network-request",
      "slug": "network-request",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "httpSemantics",
        "nist53",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Requests and transfers have protocol and authorization context.",
      "supportLimit": "An attempted request is not a completed transfer; labeling a transfer unauthorized requires the applicable policy and evidence.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "httpSemantics",
          "locator": "§6: messages; §9: methods"
        },
        {
          "source": "nist53",
          "locator": "AC-3: access enforcement"
        }
      ]
    },
    {
      "id": "observation",
      "slug": "observation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Distinguishing examined data from analysis and documenting consequential handling.",
      "supportLimit": "These bounded editorial formulations are not quoted NIST definitions of every named term.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.2–3.4: examination, analysis, and reporting"
        }
      ]
    },
    {
      "id": "operator-attribution",
      "slug": "operator-attribution",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "supportLimit": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§6.4.4: attacker identification and limitations"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and verification"
        }
      ]
    },
    {
      "id": "origin-claim",
      "slug": "origin-claim",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Protected provenance assertions and the structure that references them.",
      "supportLimit": "Validation of an assertion is distinct from factual truth and completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§6: assertions; §10: claims; §1.2: scope"
        }
      ]
    },
    {
      "id": "outpainting",
      "slug": "outpainting",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "latentDiffusionResearch",
        "diffusersInpaint",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Conditional masked generation provides technical context for extending a representation.",
      "supportLimit": "The exact outside-boundary workflow is editorial and implementation dependent; the source is not asserted to define every outpainting interface.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "latentDiffusionResearch",
          "locator": "§3.3: conditioning and image synthesis"
        },
        {
          "source": "diffusersInpaint",
          "locator": "Masked image generation"
        }
      ]
    },
    {
      "id": "overfitting",
      "slug": "overfitting",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "parent-message",
      "slug": "parent-message",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "parent-process",
      "slug": "parent-process",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "linuxFork",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "OS-specific process creation and identifiers.",
      "supportLimit": "Check the actual operating system, identifier lifetime, and reuse before correlating records.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "linuxFork",
          "locator": "Parent/child process and PID relationships"
        }
      ]
    },
    {
      "id": "perceptual-hash",
      "slug": "perceptual-hash",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "imageHashes",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Method-dependent compact image representations for similarity comparison.",
      "supportLimit": "Perceptual similarity is not cryptographic byte identity or source attribution.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "imageHashes",
          "locator": "Image hash algorithms and comparisons"
        }
      ]
    },
    {
      "id": "permission-boundary",
      "slug": "permission-boundary",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Specified permissions, authorization scope, and records of security-relevant decisions.",
      "supportLimit": "A control description is not evidence that an application enforces it or that a particular operation completed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "AC-3: access enforcement; AC-6: least privilege; AU-3: audit-record content"
        }
      ]
    },
    {
      "id": "persistence",
      "slug": "persistence",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "storageSpec",
        "nist86"
      ],
      "support": "Browser/application retention, navigation records, and storage lifetime.",
      "supportLimit": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§7.1.3: logs; §7.2.2: web usage"
        },
        {
          "source": "storageSpec",
          "locator": "Persistence and storage clearing"
        }
      ]
    },
    {
      "id": "precision",
      "slug": "precision",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "presentation-attack",
      "slug": "presentation-attack",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "identityProofing",
        "authentication",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Claimed identities and defined checks against supplied evidence or presentations.",
      "supportLimit": "Proofing and authentication policies do not retrospectively identify every human actor in a case.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "identityProofing",
          "locator": "Identity proofing, validation, verification, and biometrics"
        },
        {
          "source": "authentication",
          "locator": "§3.2.3: biometrics and presentation attacks"
        }
      ]
    },
    {
      "id": "preservation",
      "slug": "preservation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Imaging, retained source evidence, working copies, and recorded handling.",
      "supportLimit": "A preserved copy or custody record does not establish content truth or collection completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3.1.2: custody records; §4.2.1: copying files and imaging"
        }
      ]
    },
    {
      "id": "process-identifier",
      "slug": "process-identifier",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "linuxFork",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "OS-specific process creation and identifiers.",
      "supportLimit": "Check the actual operating system, identifier lifetime, and reuse before correlating records.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "linuxFork",
          "locator": "Parent/child process and PID relationships"
        }
      ]
    },
    {
      "id": "prompt",
      "slug": "prompt",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfChat",
        "nist86"
      ],
      "support": "Role-labeled messages can be serialized into model input through templates.",
      "supportLimit": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfChat",
          "locator": "Role/content messages and serialized chat templates"
        }
      ]
    },
    {
      "id": "prompt-history",
      "slug": "prompt-history",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "prompt-injection",
      "slug": "prompt-injection",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/prompt-injection/",
      "reviewer": null,
      "sourceIds": [
        "owaspPromptInjection",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Instruction influence attempted through an input or encountered material.",
      "supportLimit": "Presence of instructions does not establish compliance or a downstream effect.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "owaspPromptInjection",
          "locator": "Direct and indirect prompt injection"
        }
      ]
    },
    {
      "id": "prompt-reconstruction",
      "slug": "prompt-reconstruction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/prompt-reconstruction/",
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "prompt-template",
      "slug": "prompt-template",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfChat",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Role-labeled messages can be serialized into model input through templates.",
      "supportLimit": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfChat",
          "locator": "Role/content messages and serialized chat templates"
        }
      ]
    },
    {
      "id": "prov-activity",
      "slug": "prov-activity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "The named PROV types and responsibility roles.",
      "supportLimit": "A PROV agent can be software; it is not automatically an autonomous AI agent or a human operator.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§5.1–5.3: entities/activities, derivation, and responsibility"
        }
      ]
    },
    {
      "id": "prov-agent",
      "slug": "prov-agent",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "The named PROV types and responsibility roles.",
      "supportLimit": "A PROV agent can be software; it is not automatically an autonomous AI agent or a human operator.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§5.1–5.3: entities/activities, derivation, and responsibility"
        }
      ]
    },
    {
      "id": "prov-entity",
      "slug": "prov-entity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "The named PROV types and responsibility roles.",
      "supportLimit": "A PROV agent can be software; it is not automatically an autonomous AI agent or a human operator.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§5.1–5.3: entities/activities, derivation, and responsibility"
        }
      ]
    },
    {
      "id": "provenance",
      "slug": "provenance",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov"
      ],
      "support": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "supportLimit": "A provenance description is not independent proof that each relationship occurred.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships"
        }
      ]
    },
    {
      "id": "provenance-assertion",
      "slug": "provenance-assertion",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Protected provenance assertions and the structure that references them.",
      "supportLimit": "Validation of an assertion is distinct from factual truth and completeness.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§6: assertions; §10: claims; §1.2: scope"
        }
      ]
    },
    {
      "id": "provenance-gap",
      "slug": "provenance-gap",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov"
      ],
      "support": "General lineage relationships support recording origins and changes.",
      "supportLimit": "These field-specific formulations are editorial; a missing relationship is not proven concealment.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2 and §5.2: provenance relationships and derivation"
        }
      ]
    },
    {
      "id": "provenance-graph",
      "slug": "provenance-graph",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Origin, activity, derivation, and responsibility relationships in provenance records.",
      "supportLimit": "A provenance description is not independent proof that each relationship occurred.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§2: overview; §5: entities, activities, agents, and relationships"
        }
      ]
    },
    {
      "id": "public-key",
      "slug": "public-key",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "digitalSignatures",
        "x509",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Keys, signatures, and the certificate assertions used during verification.",
      "supportLimit": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "digitalSignatures",
          "locator": "FIPS 186-5: signature generation and verification"
        },
        {
          "source": "x509",
          "locator": "§4.1: certificate and subject public-key information"
        }
      ]
    },
    {
      "id": "quantization",
      "slug": "quantization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "quantizationDoc",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Reduced-precision representations used by the documented computation framework.",
      "supportLimit": "Format, scale, and configuration affect behavior and must be identified in the acquired environment.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "quantizationDoc",
          "locator": "Quantization introduction and reduced-precision computation"
        }
      ]
    },
    {
      "id": "race-condition",
      "slug": "race-condition",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "raceCwe",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Shared-state outcomes can depend on relative execution timing without proper synchronization.",
      "supportLimit": "A mismatch alone does not establish that a race caused it.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "raceCwe",
          "locator": "Description and common consequences"
        }
      ]
    },
    {
      "id": "read-only-access",
      "slug": "read-only-access",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Hardware/software protection against specified writes.",
      "supportLimit": "A write restriction is scoped to its interface; the surrounding running environment can still change.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.1: preventing writes during acquisition"
        }
      ]
    },
    {
      "id": "reality-model-drift",
      "slug": "reality-model-drift",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sourceMonitoring"
      ],
      "support": "General source-memory theory supplies background only.",
      "supportLimit": "These operational/working concepts are project editorial formulations; no established diagnosis, measured AI effect, or validated instrument is asserted.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sourceMonitoring",
          "locator": "Source-monitoring framework"
        }
      ]
    },
    {
      "id": "recall",
      "slug": "recall",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "receiver-operating-characteristic",
      "slug": "receiver-operating-characteristic",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "redaction",
      "slug": "redaction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "nist86",
        "sqlite"
      ],
      "support": "Purpose-bounded processing and controlled disclosure/retention of information.",
      "supportLimit": "The project’s evidence-report redaction practice is an editorial application, not a universal legal rule.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "PT-3: processing purposes; SI-12: information management"
        }
      ]
    },
    {
      "id": "regeneration",
      "slug": "regeneration",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "replay-attack",
      "slug": "replay-attack",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "asvSpoofResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Replay, synthesis, and conversion are distinct speech-spoofing conditions.",
      "supportLimit": "The evaluated recordings and simulated replay conditions do not establish how a case recording was created.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "asvSpoofResearch",
          "locator": "Database design: logical and physical access scenarios"
        }
      ]
    },
    {
      "id": "reproducibility",
      "slug": "reproducibility",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Documented repeatable procedures and evaluation of tool results.",
      "supportLimit": "This source does not experimentally validate this glossary, an AI detector, or an application interpretation.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.1: imaging documentation and forensic-tool testing"
        }
      ]
    },
    {
      "id": "response-revision",
      "slug": "response-revision",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "retention-policy",
      "slug": "retention-policy",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "storageSpec",
        "nist86",
        "sqlite"
      ],
      "support": "Browser/application retention, navigation records, and storage lifetime.",
      "supportLimit": "The retained records and eviction behavior of a particular product remain unvalidated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§7.1.3: logs; §7.2.2: web usage"
        },
        {
          "source": "storageSpec",
          "locator": "Persistence and storage clearing"
        }
      ]
    },
    {
      "id": "retrieval-query",
      "slug": "retrieval-query",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "ragResearch",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Retrieval can provide external material for a generation workflow.",
      "supportLimit": "Retrieved records, model-visible material, and durable logs must be distinguished in a particular implementation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "ragResearch",
          "locator": "§2: retriever and generator architecture"
        }
      ]
    },
    {
      "id": "retrieval-augmented-generation",
      "slug": "retrieval-augmented-generation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "ragResearch",
        "nist86"
      ],
      "support": "Retrieval can provide external material for a generation workflow.",
      "supportLimit": "Retrieved records, model-visible material, and durable logs must be distinguished in a particular implementation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "ragResearch",
          "locator": "§2: retriever and generator architecture"
        }
      ]
    },
    {
      "id": "retrieved-document",
      "slug": "retrieved-document",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "ragResearch",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Retrieval can provide external material for a generation workflow.",
      "supportLimit": "Retrieved records, model-visible material, and durable logs must be distinguished in a particular implementation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "ragResearch",
          "locator": "§2: retriever and generator architecture"
        }
      ]
    },
    {
      "id": "retry",
      "slug": "retry",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "httpSemantics",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Repeating an operation can preserve its intended effect under the relevant semantics.",
      "supportLimit": "Do not infer idempotency from a method name or apply HTTP guarantees to an unrelated tool.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "httpSemantics",
          "locator": "§9.2.2: idempotent methods and automatic retries"
        }
      ]
    },
    {
      "id": "revocation",
      "slug": "revocation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "x509",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "supportLimit": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "x509",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation"
        }
      ]
    },
    {
      "id": "sample-rate",
      "slug": "sample-rate",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "webAudioSpec",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Audio sample timing and time-domain representations.",
      "supportLimit": "Recording quality and attribution are outside the API specification.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "webAudioSpec",
          "locator": "AudioBuffer; AnalyserNode time-domain data"
        }
      ]
    },
    {
      "id": "sampler",
      "slug": "sampler",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "A specified iterative diffusion generation and sampling procedure.",
      "supportLimit": "Sampler names and step parameters vary across implementations; reproduction of a historical result is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusionResearch",
          "locator": "§2–3: diffusion and reverse-process sampling"
        }
      ]
    },
    {
      "id": "sampling-steps",
      "slug": "sampling-steps",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "diffusionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "A specified iterative diffusion generation and sampling procedure.",
      "supportLimit": "Sampler names and step parameters vary across implementations; reproduction of a historical result is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "diffusionResearch",
          "locator": "§2–3: diffusion and reverse-process sampling"
        }
      ]
    },
    {
      "id": "sandbox",
      "slug": "sandbox",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist53",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Isolation and restricted permissions supply the core containment context.",
      "supportLimit": "The sandbox’s actual interfaces and escape resistance require separate testing.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist53",
          "locator": "SC-39: process isolation; AC-6: least privilege"
        }
      ]
    },
    {
      "id": "semantic-similarity",
      "slug": "semantic-similarity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sentenceBertResearch",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Similarity depends on the representation and comparison method.",
      "supportLimit": "Semantic similarity does not establish identical meaning, source, or authorship.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sentenceBertResearch",
          "locator": "Sentence embeddings and similarity evaluation"
        }
      ]
    },
    {
      "id": "sensitivity",
      "slug": "sensitivity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "session",
      "slug": "session",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "authentication",
        "identityProofing",
        "nist86"
      ],
      "support": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "supportLimit": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "authentication",
          "locator": "Authenticator types; authentication processes; §5: session management"
        },
        {
          "source": "identityProofing",
          "locator": "Enrollment and subscriber accounts"
        }
      ]
    },
    {
      "id": "session-token",
      "slug": "session-token",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "authentication",
        "identityProofing",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Account/authenticator/session and identity-attribute checks provide the documented security context.",
      "supportLimit": "Email control, session possession, credential status, and human identity are separate; broader application session semantics vary.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "authentication",
          "locator": "Authenticator types; authentication processes; §5: session management"
        },
        {
          "source": "identityProofing",
          "locator": "Enrollment and subscriber accounts"
        }
      ]
    },
    {
      "id": "sessionstorage",
      "slug": "sessionstorage",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "webStorageSpec",
        "nist86",
        "sqlite"
      ],
      "support": "The web platform’s string key/value stores and their origin/session scope.",
      "supportLimit": "Application-defined sessions are not necessarily browser page sessions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "webStorageSpec",
          "locator": "The sessionStorage and localStorage attributes"
        }
      ]
    },
    {
      "id": "sha-256",
      "slug": "sha-256",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hash",
        "prov"
      ],
      "support": "Hash algorithms, fixed-size digests, and the distinction between input bytes and a digest.",
      "supportLimit": "Algorithm properties alone do not authenticate origin, establish custody, or exclude all collisions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hash",
          "locator": "FIPS 180-4: message digests and SHA-256"
        }
      ]
    },
    {
      "id": "sidecar-file",
      "slug": "sidecar-file",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "An external provenance record is one example of metadata stored separately from an asset.",
      "supportLimit": "The broad sidecar concept is not restricted to C2PA or defined identically by every format.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§11.4: external manifests"
        }
      ]
    },
    {
      "id": "signer",
      "slug": "signer",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "digitalSignatures",
        "x509",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Keys, signatures, and the certificate assertions used during verification.",
      "supportLimit": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "digitalSignatures",
          "locator": "FIPS 186-5: signature generation and verification"
        },
        {
          "source": "x509",
          "locator": "§4.1: certificate and subject public-key information"
        }
      ]
    },
    {
      "id": "signing-key",
      "slug": "signing-key",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "digitalSignatures",
        "x509",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Keys, signatures, and the certificate assertions used during verification.",
      "supportLimit": "Key control, human identity, content truth, and authority to act remain separate propositions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "digitalSignatures",
          "locator": "FIPS 186-5: signature generation and verification"
        },
        {
          "source": "x509",
          "locator": "§4.1: certificate and subject public-key information"
        }
      ]
    },
    {
      "id": "slack-space",
      "slug": "slack-space",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Allocated slack, unallocated regions, and residual file data.",
      "supportLimit": "Logical application deletion and physical recovery are separate; recovery is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.1.2–4.1.3: filesystems, free space, slack, and residual data"
        }
      ]
    },
    {
      "id": "sockpuppet-account",
      "slug": "sockpuppet-account",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sockpuppetResearch",
        "nistSynthetic",
        "nist86"
      ],
      "support": "Multiple apparent accounts can be controlled by one actor.",
      "supportLimit": "The study’s behavioral patterns are not proof of common control for any particular accounts.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sockpuppetResearch",
          "locator": "§1: definition and studied discussion communities"
        }
      ]
    },
    {
      "id": "soft-binding",
      "slug": "soft-binding",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "c2paTechnical",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Different mechanisms for associating provenance with content.",
      "supportLimit": "Their validity and tolerance are scheme specific; neither guarantees the scene is true.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "c2paTechnical",
          "locator": "§9.2–9.3: hard and soft bindings"
        }
      ]
    },
    {
      "id": "source-attribution",
      "slug": "source-attribution",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "identityProofing",
        "prov"
      ],
      "support": "Identity checks and source-correlation limits provide context for bounded attribution.",
      "supportLimit": "The glossary’s account/operator distinctions are editorial; no universal source-identification method is validated.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§6.4.4: attacker identification and limitations"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and verification"
        }
      ]
    },
    {
      "id": "source-memory",
      "slug": "source-memory",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sourceMonitoring",
        "nist86",
        "nistSynthetic"
      ],
      "support": "Remembered source attribution and errors in that attribution.",
      "supportLimit": "The general memory framework does not empirically validate synthetic-imprinting effects.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sourceMonitoring",
          "locator": "Source-monitoring framework, pp. 3–28"
        }
      ]
    },
    {
      "id": "source-monitoring-error",
      "slug": "source-monitoring-error",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sourceMonitoring"
      ],
      "support": "Remembered source attribution and errors in that attribution.",
      "supportLimit": "The general memory framework does not empirically validate synthetic-imprinting effects.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sourceMonitoring",
          "locator": "Source-monitoring framework, pp. 3–28"
        }
      ]
    },
    {
      "id": "speaker-verification",
      "slug": "speaker-verification",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "speakerEvaluation",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "An enrolled speaker representation is compared with a test segment under defined conditions.",
      "supportLimit": "A match does not establish consent, operator identity, or general performance outside the evaluation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "speakerEvaluation",
          "locator": "§2: evaluation tasks; enrollment and target/non-target trials"
        }
      ]
    },
    {
      "id": "specificity",
      "slug": "specificity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sklearnMetrics",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Defined reference/prediction classes and decision-based classification metrics.",
      "supportLimit": "Evaluation labels, population, threshold, and class convention determine interpretation; case performance is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sklearnMetrics",
          "locator": "Confusion matrix; precision/recall; receiver operating characteristic"
        }
      ]
    },
    {
      "id": "spectrogram",
      "slug": "spectrogram",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "spectrogramDoc",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "A transform-dependent spectral representation over time.",
      "supportLimit": "Windowing, sample rate, and other settings affect the result; it does not independently identify a speaker.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "spectrogramDoc",
          "locator": "Spectrogram calculation and returned time/frequency bins"
        }
      ]
    },
    {
      "id": "speech-to-speech-conversion",
      "slug": "speech-to-speech-conversion",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "voiceConversionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Transforming voice characteristics from supplied speech.",
      "supportLimit": "This is one conversion family; other speech-to-speech tasks and forensic attribution need separate evidence.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "voiceConversionResearch",
          "locator": "§2–3: related methods and AutoVC"
        }
      ]
    },
    {
      "id": "sqlite-wal",
      "slug": "sqlite-wal",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sqlite",
        "nist86"
      ],
      "support": "Committed SQLite changes in a WAL and their transfer during checkpointing.",
      "supportLimit": "Evidence significance depends on acquisition consistency and the actual application configuration.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sqlite",
          "locator": "§2: how WAL works; §2.1: checkpointing"
        }
      ]
    },
    {
      "id": "standard-error",
      "slug": "standard-error",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pythonProcess",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Process invocation and distinct outcome/output representations.",
      "supportLimit": "Process success can be narrower than the intended application or external-system effect.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pythonProcess",
          "locator": "Popen; returncode; stdout; stderr"
        }
      ]
    },
    {
      "id": "standard-output",
      "slug": "standard-output",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "pythonProcess",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Process invocation and distinct outcome/output representations.",
      "supportLimit": "Process success can be narrower than the intended application or external-system effect.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "pythonProcess",
          "locator": "Popen; returncode; stdout; stderr"
        }
      ]
    },
    {
      "id": "stop-sequence",
      "slug": "stop-sequence",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfGeneration",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Documented generation controls and output delivery behavior.",
      "supportLimit": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfGeneration",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers"
        }
      ]
    },
    {
      "id": "streaming-response",
      "slug": "streaming-response",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfGeneration",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Documented generation controls and output delivery behavior.",
      "supportLimit": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfGeneration",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers"
        }
      ]
    },
    {
      "id": "super-resolution",
      "slug": "super-resolution",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "superResolutionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Learned reconstruction of a higher-resolution representation.",
      "supportLimit": "Generated detail is not recovered evidence of what the original scene contained.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "superResolutionResearch",
          "locator": "§3: learning low-to-high-resolution mapping"
        }
      ]
    },
    {
      "id": "supply-chain-provenance",
      "slug": "supply-chain-provenance",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "slsaProvenance",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Recorded build inputs, dependencies, builder identity, and execution metadata.",
      "supportLimit": "These are provenance assertions; a valid representation does not prove an uncompromised build.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "slsaProvenance",
          "locator": "BuildDefinition and RunDetails"
        }
      ]
    },
    {
      "id": "synchronization",
      "slug": "synchronization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "couchReplication",
        "nist86"
      ],
      "support": "Document reconciliation can transfer revision state and retain an identifier with a deletion marker.",
      "supportLimit": "This is one documented protocol; actual marker contents and synchronization behavior are product dependent.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "couchReplication",
          "locator": "Replication protocol and change-feed deletion markers"
        }
      ]
    },
    {
      "id": "synthetic-artifact",
      "slug": "synthetic-artifact",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "synthetic-evidence",
      "slug": "synthetic-evidence",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "published",
      "guideRoute": "/glossary/terms/synthetic-evidence/",
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "synthetic-forensics",
      "slug": "synthetic-forensics",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "synthetic-identity",
      "slug": "synthetic-identity",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "syntheticIdentityFraud",
        "identityProofing",
        "nist86"
      ],
      "support": "Identity construction and proofing supply background for the project’s broader representation terminology.",
      "supportLimit": "The established fraud definition includes dishonest gain; it does not classify every fictional or AI-generated persona as fraud.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "syntheticIdentityFraud",
          "locator": "Defining the Problem of Synthetic Identity Fraud"
        },
        {
          "source": "identityProofing",
          "locator": "Identity resolution and identity evidence"
        }
      ]
    },
    {
      "id": "synthetic-imprinting",
      "slug": "synthetic-imprinting",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "sourceMonitoring"
      ],
      "support": "General source-memory theory supplies background only.",
      "supportLimit": "These operational/working concepts are project editorial formulations; no established diagnosis, measured AI effect, or validated instrument is asserted.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "sourceMonitoring",
          "locator": "Source-monitoring framework"
        }
      ]
    },
    {
      "id": "synthetic-media",
      "slug": "synthetic-media",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nistSynthetic"
      ],
      "support": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "supportLimit": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nistSynthetic",
          "locator": "Technical approaches: detection, watermarking, and provenance"
        }
      ]
    },
    {
      "id": "synthetic-media-forensics",
      "slug": "synthetic-media-forensics",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "nistSynthetic"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "system-instruction",
      "slug": "system-instruction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfChat",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Role-labeled messages can be serialized into model input through templates.",
      "supportLimit": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfChat",
          "locator": "Role/content messages and serialized chat templates"
        }
      ]
    },
    {
      "id": "task-graph",
      "slug": "task-graph",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "prov",
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "General evidence handling and relationships support the project’s explicit operational vocabulary.",
      "supportLimit": "These are editorial definitions or application-dependent records, not terms standardized by the cited publications; examples are hypothetical and historical behavior must be demonstrated.",
      "supportStatus": "editorial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§3: forensic process; §7: application data"
        },
        {
          "source": "prov",
          "locator": "§5: provenance relationships"
        }
      ]
    },
    {
      "id": "temperature",
      "slug": "temperature",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfGeneration",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Documented generation controls and output delivery behavior.",
      "supportLimit": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfGeneration",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers"
        }
      ]
    },
    {
      "id": "temporal-artifact",
      "slug": "temporal-artifact",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "faceManipulationResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Manipulation categories and their evaluation provide bounded media context.",
      "supportLimit": "A temporal pattern can have ordinary encoding or capture causes; the benchmark does not validate every such observation.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "faceManipulationResearch",
          "locator": "§3: facial manipulation; §4: evaluation under compression"
        }
      ]
    },
    {
      "id": "text-to-image-generation",
      "slug": "text-to-image-generation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "latentDiffusionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Latent representation and text-conditioned image synthesis in the studied architecture.",
      "supportLimit": "An acquired latent or image does not identify its whole creation history.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "latentDiffusionResearch",
          "locator": "§3: latent diffusion and conditioning"
        }
      ]
    },
    {
      "id": "text-to-speech",
      "slug": "text-to-speech",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "speechSynthesisResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Synthesis of speech and resemblance to a supplied speaker representation.",
      "supportLimit": "The method does not identify an operator or establish authorization to use a voice.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "speechSynthesisResearch",
          "locator": "Abstract and method: text synthesis conditioned on an acoustic prompt"
        }
      ]
    },
    {
      "id": "timeline-reconstruction",
      "slug": "timeline-reconstruction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Recorded file times and correlation across time representations.",
      "supportLimit": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones"
        }
      ]
    },
    {
      "id": "timestamp",
      "slug": "timestamp",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Recorded file times and correlation across time representations.",
      "supportLimit": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones"
        }
      ]
    },
    {
      "id": "timestamp-authority",
      "slug": "timestamp-authority",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "timestamp",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "A signed time statement under a timestamp-authority protocol.",
      "supportLimit": "Ordinary file times are different; trust and applicable protocol updates must be evaluated.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "timestamp",
          "locator": "RFC 3161 §2: timestamping requirements and protocol"
        }
      ]
    },
    {
      "id": "timestamp-normalization",
      "slug": "timestamp-normalization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Recorded file times and correlation across time representations.",
      "supportLimit": "Application-specific time meanings, clock offsets, and reconstruction rules must be established separately.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.3: file times; §6.4.2: correlating events and time zones"
        }
      ]
    },
    {
      "id": "token",
      "slug": "token",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfTokenizer",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Tokenizer units and configured input-length/truncation behavior.",
      "supportLimit": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfTokenizer",
          "locator": "Encoding, truncation, padding, and model_max_length"
        }
      ]
    },
    {
      "id": "tokenization",
      "slug": "tokenization",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfTokenizer",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Tokenizer units and configured input-length/truncation behavior.",
      "supportLimit": "The exact tokenizer, runtime inputs, and hidden summarization rules of a service remain separate questions.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfTokenizer",
          "locator": "Encoding, truncation, padding, and model_max_length"
        }
      ]
    },
    {
      "id": "tombstone",
      "slug": "tombstone",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "couchReplication",
        "nist86",
        "sqlite"
      ],
      "support": "Document reconciliation can transfer revision state and retain an identifier with a deletion marker.",
      "supportLimit": "This is one documented protocol; actual marker contents and synchronization behavior are product dependent.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "couchReplication",
          "locator": "Replication protocol and change-feed deletion markers"
        }
      ]
    },
    {
      "id": "tool-call",
      "slug": "tool-call",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mcp"
      ],
      "support": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "supportLimit": "The protocol does not guarantee durable logs or independent target-system success.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mcp",
          "locator": "Protocol Messages; Tool Result; error handling"
        }
      ]
    },
    {
      "id": "tool-invocation",
      "slug": "tool-invocation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "supportLimit": "The protocol does not guarantee durable logs or independent target-system success.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mcp",
          "locator": "Protocol Messages; Tool Result; error handling"
        }
      ]
    },
    {
      "id": "tool-result",
      "slug": "tool-result",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mcp",
        "owaspPromptInjection",
        "nist86"
      ],
      "support": "Named tool requests, arguments, results, and error representations in MCP 2025-11-25.",
      "supportLimit": "The protocol does not guarantee durable logs or independent target-system success.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mcp",
          "locator": "Protocol Messages; Tool Result; error handling"
        }
      ]
    },
    {
      "id": "top-p-sampling",
      "slug": "top-p-sampling",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfGeneration",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Documented generation controls and output delivery behavior.",
      "supportLimit": "Defaults and completion records differ across implementations; an output cannot recover unknown settings.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfGeneration",
          "locator": "GenerationConfig: temperature, top_p, stop_strings; generation output and streamers"
        }
      ]
    },
    {
      "id": "training-data",
      "slug": "training-data",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "training-run",
      "slug": "training-run",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "mlGlossary",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Core learning and evaluation concepts as defined by the educational glossary.",
      "supportLimit": "The project’s forensic applications and a deployment’s actual lineage are not independently established.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "mlGlossary",
          "locator": "Named entries: ground truth, overfitting, hyperparameter, training, weight, foundation model, fine tuning"
        }
      ]
    },
    {
      "id": "transaction",
      "slug": "transaction",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "indexedDbSpec",
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "A grouped database operation with commitment or rollback semantics.",
      "supportLimit": "Inspect the actual engine and durability settings; an application log is not proof of commitment.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "indexedDbSpec",
          "locator": "Transactions"
        },
        {
          "source": "nist86Full",
          "locator": "§7.1.4: application data"
        }
      ]
    },
    {
      "id": "transcoding",
      "slug": "transcoding",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "videoCodecs",
        "nistSynthetic"
      ],
      "support": "Frame-based encoding and codec conversion provide technical context.",
      "supportLimit": "Presentation rate, frame timestamps, retained metadata, and conversion effects need format-specific examination.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "videoCodecs",
          "locator": "Encoding, frame types, and compression"
        }
      ]
    },
    {
      "id": "transformation-history",
      "slug": "transformation-history",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov"
      ],
      "support": "Relationships between a source entity and derived or revised entities.",
      "supportLimit": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§5.2: derivation, revision, quotation, and primary source"
        }
      ]
    },
    {
      "id": "trust-anchor",
      "slug": "trust-anchor",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "x509",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Certificate/key assertions, revocation, and evaluation toward a chosen trust anchor.",
      "supportLimit": "A valid path under one policy does not establish every asserted human identity or authorization.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "x509",
          "locator": "§4: certificates; §5: CRLs; §6: certification-path validation"
        }
      ]
    },
    {
      "id": "trust-store",
      "slug": "trust-store",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "x509",
        "prov"
      ],
      "support": "Validation depends on configured accepted trust inputs.",
      "supportLimit": "The storage and management of a particular trust store are implementation specific.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "x509",
          "locator": "§6.1.1: trust-anchor information and validation inputs"
        }
      ]
    },
    {
      "id": "trusted-timestamp",
      "slug": "trusted-timestamp",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "timestamp",
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "A signed time statement under a timestamp-authority protocol.",
      "supportLimit": "Ordinary file times are different; trust and applicable protocol updates must be evaluated.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "timestamp",
          "locator": "RFC 3161 §2: timestamping requirements and protocol"
        }
      ]
    },
    {
      "id": "unallocated-space",
      "slug": "unallocated-space",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Allocated slack, unallocated regions, and residual file data.",
      "supportLimit": "Logical application deletion and physical recovery are separate; recovery is not guaranteed.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.1.2–4.1.3: filesystems, free space, slack, and residual data"
        }
      ]
    },
    {
      "id": "unknown-source-rejection",
      "slug": "unknown-source-rejection",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "openWorldResearch",
        "aiRmf",
        "nistSynthetic"
      ],
      "support": "Unseen-category rejection provides methodological context for withholding a candidate label.",
      "supportLimit": "The recognition study is not validation of generative-model attribution or source identification from output style.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "openWorldResearch",
          "locator": "Open-world problem definition and evaluation"
        }
      ]
    },
    {
      "id": "upload-event",
      "slug": "upload-event",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "httpSemantics",
        "nist53",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Requests and transfers have protocol and authorization context.",
      "supportLimit": "An attempted request is not a completed transfer; labeling a transfer unauthorized requires the applicable policy and evidence.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "httpSemantics",
          "locator": "§6: messages; §9: methods"
        },
        {
          "source": "nist53",
          "locator": "AC-3: access enforcement"
        }
      ]
    },
    {
      "id": "upscaling",
      "slug": "upscaling",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "resamplingDoc",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Image dimensions can be increased using documented resampling procedures.",
      "supportLimit": "Increased dimensions do not guarantee recovered physical detail.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "resamplingDoc",
          "locator": "Size and filters"
        }
      ]
    },
    {
      "id": "user-message",
      "slug": "user-message",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "hfChat",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Role-labeled messages can be serialized into model input through templates.",
      "supportLimit": "Role priority and application/runtime instructions differ by platform; the user-visible prompt need not be the entire context.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "hfChat",
          "locator": "Role/content messages and serialized chat templates"
        }
      ]
    },
    {
      "id": "validation",
      "slug": "validation",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86"
      ],
      "support": "Documented repeatable procedures and evaluation of tool results.",
      "supportLimit": "This source does not experimentally validate this glossary, an AI detector, or an application interpretation.",
      "supportStatus": "partial",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.1: imaging documentation and forensic-tool testing"
        }
      ]
    },
    {
      "id": "vector-database",
      "slug": "vector-database",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "vectorDb",
        "nist86",
        "nistSynthetic",
        "sourceMonitoring"
      ],
      "support": "Stored vectors can be queried using defined distance operations.",
      "supportLimit": "One extension’s semantics do not establish the schema or behavior of a different product.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "vectorDb",
          "locator": "Storing vectors and querying nearest neighbors"
        }
      ]
    },
    {
      "id": "version-history",
      "slug": "version-history",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "prov",
        "c2pa",
        "hash"
      ],
      "support": "Relationships between a source entity and derived or revised entities.",
      "supportLimit": "The evidence-handling application is editorial; transformation quality and claim truth require assessment.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "prov",
          "locator": "§5.2: derivation, revision, quotation, and primary source"
        }
      ]
    },
    {
      "id": "voice-cloning",
      "slug": "voice-cloning",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "speechSynthesisResearch",
        "nist86"
      ],
      "support": "Synthesis of speech and resemblance to a supplied speaker representation.",
      "supportLimit": "The method does not identify an operator or establish authorization to use a voice.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "speechSynthesisResearch",
          "locator": "Abstract and method: text synthesis conditioned on an acoustic prompt"
        }
      ]
    },
    {
      "id": "voice-conversion",
      "slug": "voice-conversion",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "voiceConversionResearch",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Transforming voice characteristics from supplied speech.",
      "supportLimit": "This is one conversion family; other speech-to-speech tasks and forensic attribution need separate evidence.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "voiceConversionResearch",
          "locator": "§2–3: related methods and AutoVC"
        }
      ]
    },
    {
      "id": "volatile-evidence",
      "slug": "volatile-evidence",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Running-system collection and information that can change or disappear.",
      "supportLimit": "Available evidence and collection effects require environment-specific validation.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§5.1.2: volatile data; §5.2.1: collecting volatile OS data"
        }
      ]
    },
    {
      "id": "watermark",
      "slug": "watermark",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": null,
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nistSynthetic"
      ],
      "support": "Generated/manipulated modalities and scheme-dependent transparency mechanisms.",
      "supportLimit": "NIST’s overview does not certify any detector, watermark, or conclusion on a case object.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nistSynthetic",
          "locator": "Technical approaches: detection, watermarking, and provenance"
        }
      ]
    },
    {
      "id": "waveform",
      "slug": "waveform",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "webAudioSpec",
        "nistSynthetic",
        "c2pa"
      ],
      "support": "Audio sample timing and time-domain representations.",
      "supportLimit": "Recording quality and attribution are outside the API specification.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "webAudioSpec",
          "locator": "AudioBuffer; AnalyserNode time-domain data"
        }
      ]
    },
    {
      "id": "write-blocker",
      "slug": "write-blocker",
      "aliases": [],
      "definitionStatus": "editorial-reference",
      "firstPublished": "2026-10-09",
      "lastSubstantiveEdit": "2026-10-09",
      "referenceVersion": "1.1.0",
      "guideStatus": "unpublished",
      "guideRoute": null,
      "reviewer": null,
      "sourceIds": [
        "nist86Full",
        "nist86",
        "sqlite"
      ],
      "support": "Hardware/software protection against specified writes.",
      "supportLimit": "A write restriction is scoped to its interface; the surrounding running environment can still change.",
      "supportStatus": "verified",
      "citationChecked": "2026-10-14",
      "citationRevision": "1.1.0-citation-review-1",
      "sourceLocators": [
        {
          "source": "nist86Full",
          "locator": "§4.2.1: preventing writes during acquisition"
        }
      ]
    }
  ],
  "compatibility": "Additive overlay; glossary.json and runtime glossary projections retain their existing shapes."
}
