Technical fixture / DORA source basis
DORA fixture.
DORA is the current source-basis fixture, not the market boundary.
ActProof uses DORA incident reporting to demonstrate source atoms, dependency roots, local COSE signing and local receipt verification over official source text.
The broader product thesis is receipts for recorded evidence claims across AI, GRC, audit evidence, product-passport, manufacturing, logistics, energy and public-sector reporting workflows.
01 / Why DORA remains useful
It gives a real public source corpus.
DORA provides official legal text, implementing acts, templates and machine-readable reporting pressure. That makes it a good testbed for the source-basis receipt problem: what did a reporting field or profile rely on, and what happens when the source basis moves?