{
  "schemaVersion": 1,
  "asOf": "2026-08-25",
  "classification": "enterprise-capable",
  "certificationStatus": "not-certified",
  "canonical": {
    "evidenceHub": "https://mirmc-global-grow.apps-1330328459.workers.dev/en/enterprise-evidence",
    "trustCenter": "https://mirmc-global-grow.apps-1330328459.workers.dev/en/trust",
    "status": "https://mirmc-global-grow.apps-1330328459.workers.dev/en/status",
    "securityPolicy": "https://mirmc-global-grow.apps-1330328459.workers.dev/en/security",
    "providers": "https://mirmc-global-grow.apps-1330328459.workers.dev/en/providers",
    "dataProcessing": "https://mirmc-global-grow.apps-1330328459.workers.dev/en/data-processing",
    "dataProcessingManifest": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/mirmc-data-processing.json",
    "networkGatewayManifest": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/mirmc-network-gateway.json",
    "identityEvidenceManifest": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/mirmc-identity-evidence.json",
    "sourceExecutionEvidenceManifest": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/mirmc-source-execution-evidence.json",
    "operationalEvidenceManifest": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/mirmc-operational-evidence.json",
    "evidenceIntegrityManifest": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/mirmc-evidence-integrity.json",
    "evidenceFreshnessManifest": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/mirmc-evidence-freshness.json",
    "securityTxt": "https://mirmc-global-grow.apps-1330328459.workers.dev/.well-known/security.txt"
  },
  "summary": {
    "implemented": 5,
    "controlled": 11,
    "planned": 6,
    "not-certified": 2
  },
  "controls": [
    { "id": "cloudflare-production", "category": "platform", "status": "implemented" },
    { "id": "tenant-isolation", "category": "security", "status": "implemented" },
    { "id": "vulnerability-disclosure", "category": "security", "status": "implemented" },
    { "id": "mfa-foundation", "category": "identity", "status": "controlled" },
    { "id": "billing-authority", "category": "billing", "status": "controlled" },
    { "id": "auditability", "category": "operations", "status": "implemented" },
    { "id": "bounded-agents", "category": "operations", "status": "implemented" },
    { "id": "operational-status", "category": "operations", "status": "controlled" },
    { "id": "operational-resilience-program", "category": "operations", "status": "controlled" },
    { "id": "provider-transparency", "category": "compliance", "status": "controlled" },
    { "id": "publication-governance", "category": "operations", "status": "controlled" },
    { "id": "fleet-intelligence", "category": "operations", "status": "controlled" },
    { "id": "data-lifecycle", "category": "compliance", "status": "controlled" },
    { "id": "data-processing-evidence", "category": "compliance", "status": "controlled" },
    { "id": "sso", "category": "identity", "status": "planned" },
    { "id": "scim", "category": "identity", "status": "planned" },
    { "id": "mfa-step-up", "category": "identity", "status": "controlled" },
    { "id": "release-governance", "category": "operations", "status": "controlled" },
    { "id": "network-access-enforcement", "category": "security", "status": "planned" },
    { "id": "branch-protection", "category": "operations", "status": "planned" },
    { "id": "sla-status", "category": "operations", "status": "planned" },
    { "id": "soc2", "category": "compliance", "status": "not-certified" },
    { "id": "iso27001", "category": "compliance", "status": "not-certified" },
    { "id": "dr-evidence", "category": "operations", "status": "planned" }
  ],
  "disclaimer": "Engineering maturity evidence only. This manifest is not a security certification, legal opinion, contractual SLA, SOC 2 report, ISO 27001 certificate, DPA, legal subprocessor schedule or data-residency guarantee."
}