{ "$note": "ACAM prohibited-claims phrasebook (A4 machine half): the prohibited-terms list as data - {term_or_pattern, register, prohibition_class, replacement} - plus the watch list and the approved scoped phrasings from the G2 canonical statement. Extends and stays consistent with acam-core.json prohibited_terms and the site-wide guard apeiris-control-core/tests/validate-framing.mjs (whose FORBID vocabulary this file supersets, never contradicts). THE ENFORCING CHECK EXTENSION IS A SEPARATE CONTROL-CORE TASK, NAMED PHRASE-GATE: extend validate-framing.mjs (or a sibling gate in npm test) to compile the patterns in this file over ACAM artifact language, artifact-class names, and rendering surfaces. Keys recursively sorted; ASCII only. One release unit with the ACAM standard (ACAM-SPEC.md 16.4, 17 V-1).", "acam_version": "0.1.0-draft", "approved_phrasings": [ { "constraint": "verbatim only (SPEC section 1); the one permitted use of the adjective 'independent'", "id": "APH-1", "phrasing": "designed to exceed conventional assessment deliverables in transparency, machine readability, provenance, and repeatability, while explicitly not replacing independent evidence inspection or professional attestation" }, { "constraint": "AB-2/AB-4: never a verdict without its basis", "id": "APH-2", "phrasing": "rung and failure tokens rendered with their Assurance Basis; 'effective' under Tier S labeled self-attested effectiveness" }, { "constraint": "the only zero-case and findings-summary form (RC-1); counts, never tokens", "id": "APH-3", "phrasing": "N of 12 exception classes triggered across P procedures" }, { "constraint": "SC-2", "id": "APH-4", "phrasing": "scoped figures binding every number to its numerator, denominator, and enumeration basis ('412 of 649', never a bare percent)" }, { "constraint": "SC-1: the scorecard headline; computed, never authored", "id": "APH-5", "phrasing": "X of Y in-scope obligations have evidence behind their mapping" }, { "constraint": "the section 11.1 cover line; generated from recorded fields", "id": "APH-6", "phrasing": "Population declarations internally consistent; completeness basis: ; variances: N, all typed." }, { "constraint": "the corpus consumer invariant restated for assessment artifacts", "id": "APH-7", "phrasing": "mapped is not satisfied; coverage stated, never asserted as compliance" }, { "constraint": "verifier-emitted-only: only the conforming verifier's emitted template may be used externally; the full template is indivisible and the scope line may never be dropped", "id": "APH-8", "phrasing": "the canonical statement and appropriateness disclaimer of legal/drafts/canonical-statement.md, and the completion-status templates of legal/drafts/mark-usage-policy.md section 2", "prohibition_class": "verifier-emitted-only" } ], "design_of_record": "COVERAGE_ASSESSMENT_PLAN.md sections 0 (ratification 2), 13; legal/drafts/canonical-statement.md; legal/drafts/mark-usage-policy.md", "enforcement": { "consistency": "every acam-core.json prohibited_terms entry appears here; validate-framing.mjs FORBID rules (Apeiris delivers/proves/guarantees/enforces; mapped means compliant; SOC2 certified; apeiris.io) remain in force site-wide and are not restated", "gate_status": "not implemented - a control-core task extending tests/validate-framing.mjs to consume this file; until it lands, acam-core.json prohibited_terms remains the enforced subset", "gate_task": "PHRASE-GATE" }, "license": "CC BY 4.0", "prohibited": [ { "prohibition_class": "scoped-only", "register": "assurance", "replacement": "assessment; ACAM Dossier Conformance Check", "scope_note": "prohibited as a description of ACAM artifacts, engagements, or Apeiris's role; permitted in the corpus evidence-type names (audit-log, audit-query), in references to third parties' audits as external facts, and inside the canonical statement's negation sentence", "term_or_pattern": "audit|audited|auditor" }, { "prohibition_class": "never", "register": "assurance", "replacement": "per-procedure findings by published exception class", "term_or_pattern": "audit opinion" }, { "prohibition_class": "scoped-only", "register": "assurance", "replacement": "signed record; signed dossier", "scope_note": "prohibited as a description of ACAM artifacts or engagements; permitted as the evidence reliability class 'attested' (acam-core reliability_rank), in the corpus attestation-artifact vocabulary, and inside the canonical statement's negation sentence", "term_or_pattern": "attestation|attest(s|ed|ing)?" }, { "prohibition_class": "scoped-only", "register": "assurance", "replacement": "published procedure set", "scope_note": "permitted only inside the canonical statement's negation sentence", "term_or_pattern": "agreed-upon-procedures" }, { "prohibition_class": "scoped-only", "register": "assurance", "replacement": "findings stated per procedure, by exception class", "scope_note": "prohibited as a characterization of any ACAM output ('our opinion', 'we conclude'); ordinary non-assurance usage in commentary is out of scope; the canonical statement's 'no opinion, conclusion, or assurance' negation is permitted", "term_or_pattern": "opinion|conclusion" }, { "prohibition_class": "never", "register": "assurance", "replacement": "records the state of controls and their evidence", "scope_note": "the defined field name 'Assurance Basis' is a distinct token and remains permitted", "term_or_pattern": "provides assurance|expresses assurance|assurance that" }, { "prohibition_class": "never", "register": "assurance", "replacement": "counted exception classes; procedure-derived consequence classes", "scope_note": "ICFR register without ICFR machinery (SPEC 7.4)", "term_or_pattern": "material|material weakness|significant deficiency|materiality" }, { "prohibition_class": "never", "register": "assurance", "replacement": "scoped statement binding the figure to numerator, denominator, and enumeration basis", "term_or_pattern": "guarantee(s|d)?" }, { "prohibition_class": "never", "register": "banking", "replacement": "Assurance Basis (S/F/R); assessor-of-record identity + conflicts declaration", "term_or_pattern": "independence" }, { "prohibition_class": "never", "register": "banking", "replacement": "facilitated assessment (Assurance Basis F); ACAM Dossier Conformance Check", "term_or_pattern": "independent review|independent validation" }, { "prohibition_class": "scoped-only", "register": "banking", "replacement": "external (assessor of record); named-basis phrasing", "scope_note": "the one permitted use is the verbatim quality claim of SPEC section 1 ('...not replacing independent evidence inspection or professional attestation') and the canonical statement's negation sentences; prohibited everywhere else in ACAM artifact language", "term_or_pattern": "independent(ly)?" }, { "prohibition_class": "never", "register": "certification", "replacement": "conformance check record (dossier-conformance scope only)", "term_or_pattern": "certif(y|ied|ication|icate)" }, { "prohibition_class": "scoped-only", "register": "certification", "replacement": "published, versioned, signed standard (adoption-with-attribution)", "scope_note": "prohibited as a claim about Apeiris or ACAM; describing a third party's accreditation as an external fact is out of scope", "term_or_pattern": "accredit(ed|ation)?" }, { "prohibition_class": "never", "register": "certification", "replacement": "coverage stated against obligations; mapped is not satisfied", "term_or_pattern": "compliant|compliance determination|in compliance" }, { "prohibition_class": "scoped-only", "register": "eu", "replacement": "dossier conformance (to the ACAM schema and computation rules)", "scope_note": "permitted only inside the canonical statement's negation sentence and this standard's what-ACAM-is-not clauses", "term_or_pattern": "conformity assessment" }, { "prohibition_class": "never", "register": "eu", "replacement": "none - no ACAM artifact relates to CE marking", "term_or_pattern": "CE marking|CE mark" }, { "prohibition_class": "never", "register": "eu", "replacement": "none - Apeiris is not, and does not act as, any such body", "term_or_pattern": "notified body" }, { "prohibition_class": "scoped-only", "register": "assurance", "replacement": "tested (rung), with its Assurance Basis; conformance check", "scope_note": "prohibited as a control-state or vendor claim ('controls validated', 'independently validated'); permitted in the defined artifact-class and vocabulary names: 'automated validation log - not reviewed', Control Validation Test (CVT), validation_state, and 'dossier fails validation' (schema-validation usage)", "term_or_pattern": "validat(e|ed|ion)" }, { "prohibition_class": "never", "register": "certification", "replacement": "verifier-emitted count line: 'N of 12 exception classes triggered across P procedures'", "scope_note": "validation-log register (VL-4): prohibited in class name, filename, first line, mark policy, and external claims", "term_or_pattern": "passed|pass(ed)? the (check|review|assessment)" }, { "prohibition_class": "never", "register": "certification", "replacement": "automated validation log - not reviewed", "scope_note": "validation-log register (VL-4)", "term_or_pattern": "receipt" }, { "prohibition_class": "never", "register": "assurance", "replacement": "0 of 12 exception classes triggered across N procedures", "scope_note": "as a standalone favorable characterization of a record (mark-usage-policy section 2); the counted form is the only zero-case rendering", "term_or_pattern": "clean|clear|no exceptions" }, { "prohibition_class": "never", "register": "certification", "replacement": "X of Y in-scope obligations have evidence behind their mapping (SC-1)", "term_or_pattern": "complete coverage" }, { "prohibition_class": "never", "register": "certification", "replacement": "the locked status card with its scope line", "scope_note": "the status card is locked and non-badge (mark-usage-policy section 1); no rendering or marketing may present a record as one", "term_or_pattern": "badge|seal|shield" } ], "prohibition_classes": { "never": "the term may not describe ACAM, its artifacts, engagements, or outputs in any surface, artifact name, filename, first line, or mark usage; near-neighbor variants in scope", "scoped-only": "permitted only in the exact scopes named in the entry's scope_note (for example: inside the verbatim quality claim, inside the canonical statement's negation sentences, or as a defined artifact-class/evidence-type name); prohibited everywhere else", "verifier-emitted-only": "only the conforming verifier's emitted template may carry the phrasing; no hand-authored use (mark-usage-policy section 2)" }, "registers": { "assurance": "the professional attestation / ICFR / AUP literature register (audit, attestation, opinion, material weakness)", "banking": "the financial-services supervisory register (independence, independent review/validation, effective challenge - SR 11-7 class usage)", "certification": "certification/registration-scheme register (certified, compliant, accredited, passed, complete coverage)", "eu": "EU AI Act / conformity-assessment terms of art (conformity assessment, CE marking, notified body)" }, "spec": "acam/ACAM-SPEC.md section 16.4", "watch_list": [ { "action": "flag-for-review-never-block", "note": "SR 11-7 register; added to the watch list by the round-2 dispositions; flagged wherever it appears in ACAM artifact language, pending counsel guidance", "register": "banking", "term": "effective challenge" } ] }