THE VALIDATION STACK
Checks a result must survive
Control-flow and call-graph consistency checks
Stack, register, type, and data-flow validation
Parser and intermediate-representation invariants
Cross-tool boundary and reference comparison
Static-versus-runtime correlation where available
Product-profile compatibility checks
Repeated-run comparison where supported
Negative tests that expose attractive but incorrect assumptions
Bounded behavioral comparison under documented conditions
Regression checks across supported profiles
Independent analysis passes
Human review for material unresolved ambiguity
“We reward an interpretation not because it looks familiar — but because independent evidence agrees.”
CONFIDENCE ASSIGNED PER FINDING
No blanket confidence. No cosmetic certainty.
Different elements carry radically different levels of support — so each finding carries its own evidentiary weight.
Verified
Reproducible, materially independent evidence.
High
Multiple strong signals agree, no material contradiction.
Probable
Leading interpretation, meaningful uncertainty remains.
Tentative
Limited or ambiguous support; may change.
Unresolved
Evidence is insufficient or contradictory.
A RECONSTRUCTION THAT SHOWS ITS WORK
Every serious claim leaves a technical footprint
PROOF LAYER
WHAT IT ESTABLISHES
Hash-identified input
Which exact artifact entered the analysis
Version-recorded toolchain
Which supported tools and editions participated
Timestamped stages
When analysis steps ran and in what sequence
Redacted invocations
How unattended stages ran without publishing private methods
Intermediate identities
Which artifacts connected one stage to another
Validation outcomes
Which checks passed, failed, conflicted, or were unavailable
Confidence history
Why a finding was promoted, reduced, or left unresolved
Explicit blockers
Where access, builds, protection, or evidence limited the result
Reproducibility is qualified for nondeterministic model steps, runtime-dependent behavior, and unavailable external conditions. Auditability refers to the evidence and records defined in the engagement — not an unqualified compliance certification.