Every record is a proven RED→GREEN fix pinned to an exact SDK version. Metadata and proof receipts are open; fixture bodies unlock with a grant.