{
    "evidence_boundary": "Every missing or revoked surface remains explicit. Absence of a detected failure on observed surfaces is not proof about an unobserved surface.",
    "preferred_methods": [
        "synthetic canaries",
        "aggregated effect tests",
        "configuration and contract diffs",
        "bounded confidential contest evidence"
    ],
    "privacy_boundary": "No permanent affected-person registry, public person-level case file, or unrestricted monitor browse authority.",
    "release": "R50",
    "required_surface_classes": [
        "policy_documentation",
        "production_rule_configuration",
        "decision_logs",
        "vendor_exports",
        "queue_priorities",
        "feature_model_lineage",
        "human_note_templates",
        "caches_retention",
        "downstream_reimport",
        "federation_participants"
    ],
    "schema": "antichrist.cx.collective-enforcement-observation-plan.v1"
}