Station 11 — The substrate

Every station above wrote into one place: a single RDF dataset of named graphs, separated by layer but queryable together.Controls, the plan, the Order, evidence, attestations, the plan execution, and the audit each live in their own named graph inside one dataset. That is what makes the whole chain re-executable and tamper-evident — and what lets the BOM and SSP be compiled from the exact same triples.

The traceability graph — Order → Modules → Controls

Blue = the Order, purple = claiming modules, control nodes coloured by oracle outcome (green passed / red failed / amber needsAction / grey no result). Orange halos mark contradictions. This is the picture the audit walks, forward and backward.

Live triple counts (collapsible detail)