Reference

The closed vocabularies. Anything outside these lists is refused.

Command line

Command	Purpose
`init DIR`	Create the key and the ledger
`log DIR`	Record an AI decision (JSON on standard input)
`log-evidence DIR`	Record audit evidence (JSON on standard input)
`verify DIR` / `verify-evidence DIR`	Verify a ledger
`export-evidence DIR`	Export the verified public bundle
`pubkey DIR`	Print the public key
`serve DIR`	Serve the HTTP interface (`PORT`, `BIND`)

Event kinds

platinum.decision, evidence.pipeline_run, evidence.control_check, evidence.access, evidence.change, evidence.policy.

Labels

AI: nl_query, ml_score, rag_answer.
Runs: bronze, silver, gold, platinum.
Checks: rls_test, masking_check, k_anonymity, canary_scan, identifier_range, secret_scan, ci_tests.
Access: table_read.
Changes: deploy, rollback, schema_change, key_rotation, code_change.
Policy: policy_approved.

Decisions and reasons

Decisions: allow, deny, hold, escalate, release, info.
Reasons: none, policy_deny, gate_pending, gate_denied, human_required, within_limits, needs_review, cited_receipts, guard_passed, guard_refused, injection_suspected, check_passed, check_failed.

Controls

Code	Supports
`hipaa_164_308_a1`	HIPAA security management process
`hipaa_164_308_a4`	HIPAA information access management
`hipaa_164_312_a1`	HIPAA access control
`hipaa_164_312_b`	HIPAA audit controls
`hipaa_164_312_c1`	HIPAA integrity
`hipaa_164_312_d`	HIPAA person or entity authentication
`hipaa_164_312_e1`	HIPAA transmission security
`hitrust_01_access_control`, `hitrust_06_compliance`, `hitrust_09_operations`, `hitrust_10_sdlc`, `hitrust_13_privacy`	HITRUST categories
`policy_p0_data_safety`, `policy_p3_separation_of_duties`	Our policies P0 and P3

Control names only; no framework text is reproduced. Full field descriptions: the specification.