source-output-conformance-auditlisted

# Source-Output Conformance Audit Establish what evidence supports each stage from exact source bytes to observed output. Read [the conformance matrix reference](references/conformance-matrix.md) before executing fixtures or making a completeness claim. ## Preconditions Define the authorized source set, expected output contract, parser or extractor path, validation rules, persistence boundary, readback path, and allowed local commands. Preserve source bytes. If the source set lacks custody authority, a source-cited oracle, or permission for a write-bearing test environment, report the missing gate instead of expanding access. ## Workflow 1. Pin source identity with a stable path or object identity, byte count, media type, and cryptographic digest. Record aliases and duplicate handling without changing the source. 2. Build an expected-value oracle independently from the implementation output. Cite the exact source location for every expected field, record, relationship, or deliberate absence. 3. Trace the actual production path through decoding, parsing or extraction, normalization, validation, rejection, write preparation, persistence, and readback. Identify bypasses and lossy transformations. 4. Compare each stage with the oracle. Preserve raw, normalized, rejected, written, and read-back representations so a mismatch can be localized. 5. Add mutation-sensitive tests that change source facts, order, formatting, omissions, duplicates, invalid values, and boundary cases.