Security reviews, answered from evidence

Every answer cites the file it came from.

• Quoted, then checkedA citation must appear in its source file, or the answer is downgraded to Unknown.
• Gaps named, never inflatedNo verified quote means the answer cannot be marked Supported, and the gap is tracked.
• Their spreadsheet, filled back inApproved answers go into the buyer's own file. Nothing pending is written into it.