{
  "product": "BLACKPROOF",
  "apiVersion": "blackproof-public-api-v0.1.0-alpha",
  "resource": "proofdebt",
  "posture": {
    "publicSurface": true,
    "defaultMode": "lecture-seule",
    "noUploadByDefault": true,
    "sensitiveEvidenceAccepted": false
  },
  "disclaimer": "BLACKPROOF structure des dossiers de preuve cyber. L'API publique ne fournit ni certification, ni avis juridique, ni audit qualifié, ni garantie de conformité réglementaire.",
  "version": "blackproof-proofdebt-scoring-v0.1.0-alpha",
  "scoringModel": {
    "version": "blackproof-proofdebt-scoring-v0.1.0-alpha",
    "purpose": "Measure how defensible a cyber evidence dossier is. This is not a compliance score.",
    "penalties": {
      "critical": 18,
      "high": 11,
      "medium": 6,
      "low": 3
    },
    "maxPenaltyPerQuestion": 22,
    "scoreRange": {
      "min": 0,
      "max": 100
    },
    "disclaimer": "A high ProofDebt score does not mean regulatory conformity. A low score means the dossier should not be sent without reservations."
  },
  "scoreBands": [
    {
      "min": 0,
      "max": 20,
      "label": "Non défendable",
      "meaning": "Le dossier repose principalement sur des déclarations ou des preuves absentes."
    },
    {
      "min": 21,
      "max": 50,
      "label": "Dette critique",
      "meaning": "Le dossier peut être préparatoire, mais il ne doit pas être envoyé sans réserves importantes."
    },
    {
      "min": 51,
      "max": 70,
      "label": "Partiellement défendable",
      "meaning": "Le dossier contient des preuves utiles mais plusieurs points restent fragiles."
    },
    {
      "min": 71,
      "max": 85,
      "label": "Solide avec réserves",
      "meaning": "Le dossier est exploitable, avec quelques limites à documenter."
    },
    {
      "min": 86,
      "max": 100,
      "label": "Bien structuré",
      "meaning": "Le dossier est cohérent, documenté et réutilisable, sans constituer une certification."
    }
  ],
  "interpretationSignals": [
    {
      "signal": "missing-evidence",
      "label": "Preuve manquante",
      "meaning": "A claimed answer has no supporting evidence item.",
      "expectedAction": "Add evidence or document an explicit reservation."
    },
    {
      "signal": "declared-only",
      "label": "Preuve declarative",
      "meaning": "The dossier contains a declaration but no sufficiently verifiable evidence.",
      "expectedAction": "Replace with a dated report, extract, attestation or controlled proof."
    },
    {
      "signal": "expired-evidence",
      "label": "Preuve perimee",
      "meaning": "The evidence exists but its freshness or validity is weak.",
      "expectedAction": "Refresh the evidence or document its validity period."
    },
    {
      "signal": "not-exportable",
      "label": "Preuve sensible non exportable",
      "meaning": "The evidence exists but should not leave the organization as-is.",
      "expectedAction": "Provide a controlled extract, summary, attestation or explicit reservation."
    }
  ]
}