01A certificate is one frame
A certificate can summarize a final outcome, but it cannot by itself explain the custody, media identity, operator, method, exception, or alternate path that preceded it.
- Final status without source evidence is hard to interrogate.
- Component outcomes can differ from chassis outcomes.
- Exceptions need their own evidence.
02Evidence should accumulate
Each material event should add attributable context to one governed history.
- Custody before erasure.
- Erasure result before alternate path.
- Processing and downstream outcome before final close.
03Failure is part of the proof
An unsuccessful attempt is not evidence noise. It may explain why a different authorized action became necessary.
- Preserve original failure.
- Record remediation or destruction path.
- Show who authorized closure.