Loading report

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "Privacy notice evidence was retained in public policy-surface evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Excerpt: Privacy Policy for the ErgoVeritas test 2 canary ErgoVeritas is the owner of test2.html. This policy applies only to that owned scanner-validation page. It describes deliberately varied signals so CertScore can test evidence capture; it does not describe other ErgoVeritas products. Information collected and why On a fresh visit without GPC or a saved manual choice, the test page sets six first-party cookie identifiers and analytics/session storage. It requests analytics, advertising, session replay and product-meas",
      "Evidence: privacy policy surface retained",
      "Policy URL: https://ergoveritas.com/test2-privacy-policy.html"
    ],
    "signalObserved": true,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-09-28T15:36:37.213Z",
      "observedTopics": [
        "cookies",
        "analytics",
        "advertising",
        "targeted_advertising",
        "sale_or_share",
        "do_not_sell_or_share",
        "global_privacy_control",
        "notice_at_collection",
        "session_replay_or_behavioral_analytics",
        "consent_withdrawal",
        "cookie_settings",
        "data_retention",
        "processing_purposes"
      ],
      "cookiePolicyUrls": [
        "https://ergoveritas.com/test2-cookie-settings.html"
      ],
      "cookieDisclosures": [],
      "mentionedControls": [
        "global_privacy_control",
        "consent_withdrawal",
        "cookie_settings"
      ],
      "privacyPolicySize": {
        "url": "https://ergoveritas.com/test2-privacy-policy.html",
        "completeness": "complete",
        "documentFormat": "text",
        "compressedBytes": 3355,
        "measurementScope": "selected_usable_privacy_policy",
        "decompressedBytes": 3355
      },
      "privacyPolicyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "cookie_disclosures": [],
      "policySectionCount": 6,
      "policySurfaceCount": 5,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": true,
      "policyPrimaryLanguage": "en",
      "policyLastUpdatedTexts": [],
      "policyTextCoverageMode": "section_targeted",
      "retainedPolicySections": [
        {
          "charEnd": 3218,
          "heading": "Privacy Policy for the ErgoVeritas test 2 canary",
          "quality": "strong",
          "charStart": 362,
          "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "textExcerpt": "ErgoVeritas is the owner of test2.html . This policy applies only to that owned scanner-validation page. It describes deliberately varied signals so CertScore can test evidence capture; it does not describe other ErgoVeritas products. Information collected and why On a fresh visit without GPC or a saved manual choice, the test page sets six first-party cookie identifiers and analytics/session storage. It requests analytics, advertising, session replay and product-measurement endpoints. With GPC, it sets five of those cookies and omits the advertising request. The purposes in this test are audience measurement, advertising signal classification, replay detection and product-event measurement. No account, purchase, form submission or authentication data is collected by the page. Advertising, sale and sharing The test sends an advertising request to Meta and measurement or replay requests to Google Analytics, Microsoft Clarity, Hotjar, FullStory and Mixpanel before a choice. These are intentional signals for review of targeted advertising and possible sale or sharing. The test does not itself reach a legal conclusion about any individual request."
        },
        {
          "charEnd": 1272,
          "heading": "Information collected and why",
          "quality": "strong",
          "charStart": 695,
          "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "textExcerpt": "On a fresh visit without GPC or a saved manual choice, the test page sets six first-party cookie identifiers and analytics/session storage. It requests analytics, advertising, session replay and product-measurement endpoints. With GPC, it sets five of those cookies and omits the advertising request. The purposes in this test are audience measurement, advertising signal classification, replay detection and product-event measurement. No account, purchase, form submission or authentication data is collected by the page."
        },
        {
          "charEnd": 1670,
          "heading": "Advertising, sale and sharing",
          "quality": "strong",
          "charStart": 1272,
          "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "textExcerpt": "The test sends an advertising request to Meta and measurement or replay requests to Google Analytics, Microsoft Clarity, Hotjar, FullStory and Mixpanel before a choice. These are intentional signals for review of targeted advertising and possible sale or sharing. The test does not itself reach a legal conclusion about any individual request."
        },
        {
          "charEnd": 2134,
          "heading": "Global Privacy Control",
          "quality": "strong",
          "charStart": 1670,
          "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "textExcerpt": "When Global Privacy Control (GPC) is enabled in the browser, this canary omits the Meta advertising request and its _fbc test cookie. Five other optional requests and their test cookies remain. A complete paired scan can observe this partial reduction; an incomplete comparison cannot establish the site's response. A saved manual Do Not Sell/Share choice turns off all future optional test activity in this browser."
        },
        {
          "charEnd": 2674,
          "heading": "Opt-out and cookie choices",
          "quality": "strong",
          "charStart": 2134,
          "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "textExcerpt": "Visitors can use Do Not Sell or Share My Personal Information , Your Privacy Choices , or Cookie Settings . Saving any of these test choices suppresses optional requests on later visits in that browser and removes the first-party test cookies. The scanner observes links and notice passages; it does not verify these manual actions in an ordinary passive scan."
        },
        {
          "charEnd": 3218,
          "heading": "Retention and privacy rights",
          "quality": "strong",
          "charStart": 2674,
          "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "textExcerpt": "First-party test cookies expire after 15 minutes and saved manual-choice markers after 24 hours. This page makes no statement about providers' separate retention. The canary does not process real requests to access, delete, correct, or obtain a copy of personal information; the test controls should not be treated as such a process. Notice at Collection · Cookie Policy"
        }
      ],
      "cookieDisclosurePresent": true,
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": true,
      "processingErrorObserved": false,
      "observedPolicyTopicHints": [
        "cookies",
        "analytics",
        "advertising",
        "targeted_advertising",
        "sale_or_share",
        "do_not_sell_or_share",
        "global_privacy_control",
        "notice_at_collection",
        "session_replay_or_behavioral_analytics",
        "consent_withdrawal",
        "cookie_settings",
        "data_retention",
        "processing_purposes"
      ],
      "policyDocumentProvenance": [
        {
          "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "policyTitle": "Privacy Policy — ErgoVeritas test 2",
          "artifactRefs": [
            "policy_excerpt_30725dd5_2e9dd398",
            "policy_surface_text_30725dd5_2e9dd398"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_30725dd5",
          "discoveryMethod": "page_text_link",
          "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
          "lastUpdatedText": null,
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "ErgoVeritas test 2",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": true
        }
      ],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [],
      "policyTextExtractionHealth": {
        "policyUrls": [
          "https://ergoveritas.com/test2-privacy-policy.html"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.0016406890894175555,
          "policyTermCount": 8,
          "alphabeticWordRatio": 0.8455284552845529,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 21
        },
        "policyUrlRetained": true,
        "extractedTextLength": 2438,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [],
      "discoveredPrivacyPolicyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "dedicatedCookiePolicyPresent": false,
      "policyTextEvidenceProjection": {
        "scanId": "d96df06d-3e94-4896-8346-1a026d68e5af",
        "documents": [
          {
            "finalUrl": "https://ergoveritas.com/test2-privacy-policy.html",
            "artifactId": "policy_surface_text_30725dd5_2e9dd398",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-us-west-1-199536052647/v2-dag-lambda/local/d96df06d-3e94-4896-8346-1a026d68e5af/auxiliary/policy_surface_text_30725dd5_2e9dd398.txt",
            "contentType": "text/html",
            "documentRole": "policy_document",
            "requestedUrl": "/test2-privacy-policy.html",
            "observationId": "policy_surface_30725dd5",
            "redirectChain": [
              "https://ergoveritas.com/test2-privacy-policy.html"
            ],
            "artifactSha256": "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 2438,
              "retainedSectionCount": 6,
              "extractedSectionCount": 6,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_30725dd5_2e9dd398.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 2439,
            "retainedTextChars": 2438,
            "documentFetchState": "fetched",
            "retainedTextSha256": "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "ErgoVeritas test 2",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 2438,
              "retainedTextChars": 2438
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "direct_privacy_document_without_index_evidence"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 77,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "direct_privacy_document_without_index_evidence"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "0f9f2087c3e96b1d452e1c8e17aeaec9140f280cc8be15e3d36c621807aecd79",
                "evidenceSectionSha256": "3f3131f80fa3679a3b664c2b8284cf320b5a85dd0599660382987532ae1d1d18",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-28T15:36:43.231Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-us-west-1-199536052647/v2-dag-lambda/local/d96df06d-3e94-4896-8346-1a026d68e5af/CanonicalEvidenceBundle.json",
          "sha256": "66a2163f8c183a0c3dd5299f5598b8ca0aca719437b6bfc742c8b4abdc666fa1",
          "sizeBytes": 366848,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyEvaluationState": "fetched_usable",
      "legalFrameworkValidityMatches": [],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements",
        "Data transfers"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [
          "https://ergoveritas.com/test2-privacy-policy.html"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.0016406890894175555,
          "policyTermCount": 8,
          "alphabeticWordRatio": 0.8455284552845529,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 21
        },
        "policyUrlRetained": true,
        "extractedTextLength": 2438,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [
        "Privacy Policy for the ErgoVeritas test 2 canary",
        "Information collected and why",
        "Advertising, sale and sharing",
        "Global Privacy Control",
        "Opt-out and cookie choices",
        "Retention and privacy rights"
      ],
      "selectedPrivacyPolicyDocument": {
        "documentUrl": "https://ergoveritas.com/test2-privacy-policy.html",
        "observationId": "policy_surface_30725dd5",
        "traversalDepth": 0,
        "parentSurfaceUrl": null,
        "parentObservationId": null,
        "selectionReasonCodes": []
      },
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/test2-privacy-policy.html"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_30725dd5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "discoveredPrivacyPolicyDetails": [
        {
          "url": "https://ergoveritas.com/test2-privacy-policy.html",
          "status": "fetched",
          "documentFetchState": "fetched",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "usable"
        }
      ],
      "article13DisclosureTypesPartial": [],
      "discoveredPrivacyPolicyStatuses": [
        "fetched"
      ],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "d96df06d-3e94-4896-8346-1a026d68e5af",
        "documents": [
          {
            "finalUrl": "https://ergoveritas.com/test2-privacy-policy.html",
            "artifactId": "policy_surface_text_30725dd5_2e9dd398",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-us-west-1-199536052647/v2-dag-lambda/local/d96df06d-3e94-4896-8346-1a026d68e5af/auxiliary/policy_surface_text_30725dd5_2e9dd398.txt",
            "contentType": "text/html",
            "documentRole": "policy_document",
            "requestedUrl": "/test2-privacy-policy.html",
            "observationId": "policy_surface_30725dd5",
            "redirectChain": [
              "https://ergoveritas.com/test2-privacy-policy.html"
            ],
            "artifactSha256": "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 2438,
              "retainedSectionCount": 6,
              "extractedSectionCount": 6,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_30725dd5_2e9dd398.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 2439,
            "retainedTextChars": 2438,
            "documentFetchState": "fetched",
            "retainedTextSha256": "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "ErgoVeritas test 2",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 2438,
              "retainedTextChars": 2438
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "direct_privacy_document_without_index_evidence"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 77,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "direct_privacy_document_without_index_evidence"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "0f9f2087c3e96b1d452e1c8e17aeaec9140f280cc8be15e3d36c621807aecd79",
                "evidenceSectionSha256": "3f3131f80fa3679a3b664c2b8284cf320b5a85dd0599660382987532ae1d1d18",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-28T15:36:43.231Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-us-west-1-199536052647/v2-dag-lambda/local/d96df06d-3e94-4896-8346-1a026d68e5af/CanonicalEvidenceBundle.json",
          "sha256": "66a2163f8c183a0c3dd5299f5598b8ca0aca719437b6bfc742c8b4abdc666fa1",
          "sizeBytes": 366848,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyTextCharacterCount": 2438,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [],
      "article13DisclosureTypesObserved": [],
      "retainedArticle13SectionEvidence": [
        {
          "surfaceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "coverageArea": "data_retention",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "selectedPolicySectionExcerpt": "Retention and privacy rights. First-party test cookies expire after 15 minutes and saved manual-choice markers after 24 hours. This page makes no statement about providers' separate retention. The canary does not process real requests to access, delete, correct, or obtain a copy of personal information; the test controls should not be treated as such a process. Notice at Collection · Cookie Policy",
          "selectedPolicySectionHeading": "Retention and privacy rights"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "selectedPolicySectionExcerpt": "Retention and privacy rights. cookies expire after 15 minutes and saved manual-choice markers after 24 hours. This page makes no statement about providers' separate retention. The canary does not process real requests to access, delete, correct, or obtain a copy of personal information; the test controls should not be treated as such a process. Notice at Collection · Cookie Policy",
          "selectedPolicySectionHeading": "Retention and privacy rights"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "selectedPolicySectionExcerpt": "Privacy Policy for the ErgoVeritas test 2 canary. No account, purchase, form submission or authentication data is collected by the page. Advertising, sale and sharing The test sends an advertising request to Meta and measurement or replay requests to Google Analytics, Microsoft Clarity, Hotjar, FullStory and Mixpanel before a choice. These are intentional signals for review of targeted advertising and possible sale or sharing. The test does not itself reach a legal conclusion about any individual request.",
          "selectedPolicySectionHeading": "Privacy Policy for the ErgoVeritas test 2 canary"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "selectedPolicySectionExcerpt": "Advertising, sale and sharing. The test sends an advertising request to Meta and measurement or replay requests to Google Analytics, Microsoft Clarity, Hotjar, FullStory and Mixpanel before a choice. These are intentional signals for review of targeted advertising and possible sale or sharing. The test does not itself reach a legal conclusion about any individual request.",
          "selectedPolicySectionHeading": "Advertising, sale and sharing"
        }
      ],
      "retainedPrivacyPolicyTextExcerpt": "Privacy Policy for the ErgoVeritas test 2 canary ErgoVeritas is the owner of test2.html . This policy applies only to that owned scanner-validation page. It describes deliberately varied signals so CertScore can test evidence capture; it does not describe other ErgoVeritas products. Information collected and why On a fresh visit without GPC or a saved manual choice, the test page sets six first-party cookie identifiers and analytics/session storage. It requests analytics, advertising, session replay and product-measurement endpoints. With GPC, it sets five of those cookies and omits the advertising request. The purposes in this test are audience measurement, advertising signal classification, replay detection and product-event measurement. No account, purchase, form submission or authentication data is collected by the page. Advertising, sale and sharing The test sends an advertising request to Meta and measurement or replay requests to Google Analytics, Microsoft Clarity, Hotjar, FullStory and Mixpanel before a choice. These are intentional signals for review of targeted advertising and possible sale or sharing. The test does not itself reach a legal conclusion about any individual request. Global Privacy Control When Global Privacy Control (GPC) is enabled in the browser, this canary omits the Meta advertising request and its _fbc test cookie. Five other optional requests and their test cookies remain. A complete paired scan can observe this partial reduction; an incomplete comparison cannot establish the site's response. A saved manual Do Not Sell/Share choice turns off all future optional test activity in this browser. Opt-out and cookie choices Visitors can use Do Not Sell or Share My Personal Information , Your Privacy Choices , or Cookie Settings . Saving any of these test choices suppresses optional requests on later visits in that browser and removes the first-party test cookies. The scanner observes links and notice passages; it does not verify these manual actions in an ordinary passive scan. Retention and privacy rights First-party test cookies expire after 15 minutes and saved manual-choice markers after 24 hours. This page makes no statement about providers' separate retention. The canary does not process real requests to access, delete, correct, or obtain a copy of personal information; the test controls should not be treated as such a process. Notice at Collection · Cookie Policy",
      "validatedDisclosureTypesObserved": [],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 1,
      "discardedArticle13DisclosureSignals": [
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
          "evidenceText": "The scanner observes links and notice passages; it does not verify these manual actions in an ordinary passive scan. Retention and privacy rights First-party test cookies expire after 15 minutes and saved manual-choice markers after 24 hours. This page makes no statement about providers' separate retention.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "data_retention"
        }
      ],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 0,
        "candidateDispositions": [],
        "acceptedCandidateCount": 0,
        "rejectedCandidateCount": 0,
        "discardedCandidateCount": 0,
        "diagnosticCandidateCount": 0,
        "productionCreditSignalCount": 0
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the legal basis stated for each processing purpose; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "legal_basis",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the retention period or substantive criteria for each relevant data category; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "data_retention",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "controller_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the purposes for each described processing activity; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "processing_purposes",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the recipients or recipient categories that receive personal data; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "recipients_or_vendor_categories",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "Data subject rights disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Data subject rights disclosure",
      "Excerpt: Visitors can use Do Not Sell or Share My Personal Information, Your Privacy Choices, or Cookie Settings.",
      "Policy URL: https://ergoveritas.com/test2-privacy-policy.html"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.95,
      "surfaceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "evidenceText": "Visitors can use Do Not Sell or Share My Personal Information, Your Privacy Choices, or Cookie Settings.",
      "matchedLocale": null,
      "disclosureType": "data_subject_rights",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "rights_or_choice_signals_present",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://ergoveritas.com/test2-privacy-policy.html"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_subject_rights",
      "originKey": "gdpr_transparency.article13.data_subject_rights",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_subject_rights",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the intended international transfers and applicable safeguard information; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "international_transfers",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.",
        "Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "dpo_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the right to complain to a supervisory authority; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "supervisory_authority",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Automated decision-making / profiling disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/test2-privacy-policy.html",
      "policyTitle": "Privacy Policy — ErgoVeritas test 2",
      "artifactRefs": [
        "policy_excerpt_30725dd5_2e9dd398",
        "policy_surface_text_30725dd5_2e9dd398"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "Privacy Policy for the ErgoVeritas test 2 canary",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-28T15:36:42.312Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "ErgoVeritas test 2",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0016406890894175555,
        "policyTermCount": 8,
        "alphabeticWordRatio": 0.8455284552845529,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 21
      },
      "policyUrlRetained": true,
      "extractedTextLength": 2438,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/test2-privacy-policy.html"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_30725dd5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "c82bfdc0e439ce4225330062af7681a4146822c64c0c738e6cd3b6b98ab110f9"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}