TRACE CPR 2026 PUBLIC EVIDENCE PACKAGE - V5

Purpose: public accountability record for the 2026 CPR incident.

Included:
- structured official incident record
- CPR control/audit-trail matrix
- written findings in EN/RO/DK
- SHA-256 integrity manifest

Deliberately excluded from public release:
- full crawl index and URL inventory
- security-header matrix
- error-path inventory
- cookie/header inventories
- preproduction/password workflow details
- raw collector artifact inventory

Reason: those operational details are not established as the September breach path and are unnecessary to support the core accountability claims. The public package should document the case without becoming a reconnaissance bundle.

No authenticated material, CPR lookups, personal records, private credentials, session data or exploitation material is included.

SHA-256 verifies file identity. It does not prove causation.
