Evidence

Each package bundles the findings and telemetry for a framework over a period, then seals it for tamper-evidence — a Merkle root + HMAC over the canonical manifest, re-verifiable on demand. The seal proves integrity; an authoritative e-signature is applied separately through your e-signature provider (Adobe Sign / DocuSign). Open one for its contents, or download the portable JSON bundle an auditor can verify independently.