Benjamin Admin f6c5f4e0a9 fix(ucca): SI-2 evidence = config_export + test_report ...

Aligns provide_security_updates -> SI-2 evidence to the curated acceptance set:
config_export (secure-update mechanism config) + test_report (patch verification).
For "provide updates" the patch-verification test is more on-point than a vuln
scan; repo_scan stays on CM-7 for attack-surface.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-26 00:26:29 +02:00

..

nist_evidence.jsonl

fix(ucca): SI-2 evidence = config_export + test_report

2026-06-26 00:26:29 +02:00

owasp_evidence.jsonl

feat(ucca): Evidence-Requirement model (step A)

2026-06-25 10:06:09 +02:00