TRUTH_SURFACE_NOTE
Source truth vs runtime truth
Source presence is useful, but it does not prove a control is running.
sourceruntimegovernance
A detection file can prove that source exists. It does not prove that the source has been deployed, executed, or observed.
That separation keeps a readable repository from becoming an accidental runtime claim.