{
  "package_id": "product.governed-data-assurance",
  "name": "Governed Data and Assurance",
  "version": "0.1.0",
  "package_class": "product",
  "description": "Compose governed sources, transformations, reports, search, controls and assurance evidence through stable contracts.",
  "publisher": "GovOPlaN",
  "category": "data-governance",
  "license": "AGPL-3.0-or-later",
  "required_modules": [
    {"module_id": "access"},
    {"module_id": "audit"},
    {"module_id": "dataflow"},
    {"module_id": "datasources"},
    {"module_id": "policy"},
    {"module_id": "reporting"},
    {"module_id": "risk_compliance"},
    {"module_id": "search"}
  ],
  "optional_modules": [
    {"module_id": "connectors"},
    {"module_id": "files"},
    {"module_id": "notifications"},
    {"module_id": "tasks"},
    {"module_id": "workflow_engine"}
  ],
  "evidence": [
    {
      "kind": "documentation",
      "reference": "packages/product/governed-data-assurance/README.md",
      "summary": "Defines the package boundary, provenance chain, and reference-readiness gates."
    },
    {
      "kind": "target_test",
      "reference": "tools/checks/check-datasource-composition.py",
      "summary": "Proves governed Connector acquisition, Datasource registration, queued Dataflow execution, frozen publication, idempotency, and recovery evidence."
    },
    {
      "kind": "target_test",
      "reference": "tools/checks/check-sanctions-screening-composition.py",
      "summary": "Proves immutable sanctions acquisition, import, screening replay, independent review, freshness gates, and rescreening across module capabilities."
    }
  ],
  "tags": ["datasources", "dataflow", "reporting", "sanctions", "assurance"]
}