Controls · The evidence trail · Element
The retention
How long the evidence must be kept, and where.
The part
What it is
Retention requirements come from the obligation and are frequently longer than ordinary data retention policy.
Conflicting requirements — a rule requiring retention against a rule requiring deletion — need resolving explicitly rather than by whichever system acts first.
The smallest level
The attributes it carries
Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.