Reference FAQ

Are schema files normative standards?

No. They are reusable starting points for composition manifests, rollback packets, evidence cards, lineage records, evaluation records, retirement records, and behavioral-extinction reviews.

Can the threat catalog be used as an incident playbook?

It is a planning reference, not an operational exploit or response manual. Organizations should adapt it to their own legal, security, and safety processes.

Why so many UTC timestamps?

UTC timestamps avoid ambiguity when evidence, release aliases, memory snapshots, and review records cross jurisdictions.