apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ControlPoints"
metadata:
  name: "nats-nack-0-34-0"
spec:
  points:
    -
      category: "source-lock"
      status: "handled"
      evidence: "source-lock.yaml"
    -
      category: "dependency-lock"
      status: "handled"
      evidence: "dependency-lock.yaml"
      dependencyCount: 0
    -
      category: "capability-profile"
      status: "handled"
      kubeVersion: "1.30.0"
    -
      category: "variant-revision"
      status: "handled"
      evidence: "revisions/default/r001/variant-revision.yaml"
    -
      category: "rendered-manifest-scan"
      status: "handled"
      evidence: "revisions/default/r001/receipts/scan-receipt.yaml"
    -
      category: "helm-equivalence"
      status: "handled"
      evidence: "revisions/default/r001/receipts/helm-equivalence-receipt.yaml"
    -
      category: "generated-facts"
      status: "source-signal-recorded"
      note: "default proof render was deterministic; future generated material must be captured before approval"
    -
      category: "tpl-extension-slots"
      status: "source-signal-recorded"
      note: "tpl use is recorded for review and variant analysis"
    -
      category: "crds"
      status: "review-required"
      count: 6
    -
      category: "cluster-rbac"
      status: "scan-and-review"