# ONE Market E18 — External Evidence Production Gate

The production gate remains BLOCKED until every item below is satisfied by externally controlled evidence.

- [ ] The signed challenge is valid, unexpired, and binds the exact source, build, artifact, and toolchain digests.
- [ ] All nine required evidence classes are present.
- [ ] Each report is signed by an external, non-revoked anchor whose accreditation scope covers the reported class.
- [ ] At least three independent laboratory organizations participate.
- [ ] At least two independent witness organizations sign immutable report cores.
- [ ] At least three physical regions use distinct providers, failure domains, and administrators.
- [ ] At least two jurisdictions are represented where required by policy.
- [ ] Raw data, calibration records, dataset manifests, and chain-of-custody roots are present and immutable.
- [ ] Every report is bound to the exact challenge identifier and nonce.
- [ ] No fixture, requester self-attestation, or internal worker evidence is used for production admission.
- [ ] Accreditation, recognition, validity, and revocation status have been independently rechecked at admission time.
- [ ] Cryptographic, distributed-systems, side-channel, and fault-injection findings are resolved or formally accepted by the accountable authority.
- [ ] The final evidence bundle is logged, versioned, exportable, and independently replayable.
