{"version":"V7.3.0","controls":[{"control_id":"heavy-work","title":"Heavy-work spend gate","status":"ACTIVE","public_evidence":"WORK_REQUIRED jobs are held for explicit manual handoff; no automatic external Work spend is authorized.","updated_at":"2026-11-09T09:53:30.332Z"},{"control_id":"iso27001","title":"ISO 27001 certification","status":"NOT_CERTIFIED","public_evidence":"NAIF does not claim ISO 27001 certification.","updated_at":"2026-11-09T09:53:30.333Z"},{"control_id":"job-access","title":"Job result access","status":"ACTIVE","public_evidence":"Job lifecycle and result endpoints require a per-job bearer token.","updated_at":"2026-11-09T09:53:30.331Z"},{"control_id":"pentest","title":"Independent penetration test","status":"NOT_CLAIMED","public_evidence":"No independent penetration-test claim is published.","updated_at":"2026-11-09T09:53:30.333Z"},{"control_id":"qa-passport","title":"Verified delivery passport","status":"ACTIVE","public_evidence":"Delivered jobs receive a checksum and QA-linked passport generated from stored execution evidence.","updated_at":"2026-11-09T09:53:30.332Z"},{"control_id":"retention","title":"Configurable retention","status":"ACTIVE","public_evidence":"Eligible jobs can opt into bounded retention with auditable purge records.","updated_at":"2026-11-09T09:53:30.332Z"},{"control_id":"soc2","title":"SOC 2 certification","status":"NOT_CERTIFIED","public_evidence":"NAIF does not claim SOC 2 certification.","updated_at":"2026-11-09T09:53:30.333Z"},{"control_id":"tls","title":"TLS transport","status":"ACTIVE","public_evidence":"Public storefront is served through HTTPS.","updated_at":"2026-11-09T09:53:30.327Z"}],"verifiedEvidence":{"deliveredJobs":2,"deliveryPassports":2},"certifications":{"soc2":false,"iso27001":false},"commercialState":"QUOTE_ONLY"}