[
  {
    "claim": "No cookies",
    "location": "/trust/",
    "evidence": "No document.cookie usage, no Set-Cookie headers, no analytics scripts in frontend/assets or backend responses",
    "test": "frontend/scripts/check-seo-a11y.js"
  },
  {
    "claim": "No behavioral tracking",
    "location": "/trust/",
    "evidence": "No analytics/session-replay/pixel-tracking/fingerprinting scripts anywhere in frontend/",
    "test": "frontend/scripts/check-seo-a11y.js"
  },
  {
    "claim": "No payment data collected",
    "location": "/trust/",
    "evidence": "No payment processor SDKs, card fields, or billing forms anywhere in frontend/ or backend/",
    "test": "frontend/scripts/check-seo-a11y.js"
  },
  {
    "claim": "Evidence-backed claims",
    "location": "/trust/, /#chat",
    "evidence": "backend/evidence/ledger.json + generated manifest.json; adjudicator.py rejects any claim whose evidence_id is not in the manifest",
    "test": "backend/tests/test_adjudicator.py, backend/tests/test_validate_manifest.py"
  },
  {
    "claim": "No raw resume sent to LLM providers",
    "location": "/trust/, backend/README.md",
    "evidence": "main.py builds SYSTEM_PROMPT only from EVIDENCE_PROJECTION (manifest-derived); resume/resume.txt is git-ignored and never read at runtime",
    "test": "backend/tests/test_main.py"
  },
  {
    "claim": "AI-readable",
    "location": "/trust/, /llms.txt, /ai-index.json",
    "evidence": "llms.txt and ai-index.json exist, robots.txt allows public and AI crawlers with no global Disallow",
    "test": "frontend/scripts/check-seo-a11y.js"
  },
  {
    "claim": "WCAG 2.2 AA target",
    "location": "/trust/",
    "evidence": "Semantic landmarks, skip link, single H1 per page, labeled form controls, alt text, table captions/scope, visible focus states, reduced-motion support -- verified by static check; no live Lighthouse/axe run captured yet (see Known limitations)",
    "test": "frontend/scripts/check-seo-a11y.js"
  },
  {
    "claim": "Synthetic data only for labs",
    "location": "/labs/health.html, /labs/energy.html, /labs/construction.html",
    "evidence": "backend/evidence/ledger.json lab entries explicitly state synthetic/public-safe data only, and each lab page states its data boundary",
    "test": "backend/tests/test_validate_manifest.py"
  },
  {
    "claim": "Recruiter submission facts are present",
    "location": "/recruiter/",
    "evidence": "Recruiter packet visibly lists work authorization, location, time zone, availability, work model, engagement types, target roles, core stack, resume link, LinkedIn, GitLab, submission permission, and no active clearance claimed",
    "test": "frontend/scripts/check-seo-a11y.js"
  },
  {
    "claim": "AI parser guardrails include work authorization and no-clearance inference limits",
    "location": "/llms.txt, /ai-index.json",
    "evidence": "llms.txt and ai-index.json state U.S. citizen/no sponsorship and explicitly forbid inferring active security clearance, Public Trust status, or ITAR/EAR approval",
    "test": "frontend/scripts/check-seo-a11y.js"
  }
]