{
  "pif_version": "0.2",
  "pif_corpus_version": "example-corpus-2026-w20",
  "assertion_id": "pa_v02_provenance_example_001",
  "workflow_ref": "wf_v02_provenance_example",
  "produced_by": {
    "tool": "example-producer",
    "version": "0.0.0",
    "methodology": "example-method-v0",
    "provider": "example",
    "model_used": "example-model"
  },
  "produced_at": "2026-05-27T10:00:00Z",
  "corpus_snapshot": {
    "snapshot_id": "corpus_example_w20",
    "snapshot_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
    "snapshot_date": "2026-05-25T00:00:00Z",
    "source_count": 4
  },
  "risk_classification": {
    "level": "medium",
    "rationale": "Synthetic illustrative assertion. Demonstrates per-source rights provenance only; the requirement text and excerpt below are placeholders, not real regulatory wording."
  },
  "regulatory_domains_identified": [
    "us_fda_21cfr_820:design_controls",
    "ich:e6_gcp",
    "iso:synthetic_qms_clause",
    "iso_14971:synthetic_risk_clause"
  ],
  "applicable_requirements": [
    {
      "requirement_id": "req_pd_001",
      "requirement_text": "SYNTHETIC ILLUSTRATIVE TEXT (not real regulatory wording): a manufacturer should document its design and development activities. Cited from a public-domain source, so the full text may be reproduced verbatim.",
      "source": {
        "url": "https://www.example-public-domain-regulator.gov/synthetic-reg/part-000",
        "canonical_document_id": "SYNTHETIC-PD-000",
        "title": "Synthetic public-domain regulation (illustrative)",
        "issuing_authority": "U.S. FDA",
        "jurisdiction": "US",
        "document_type": "regulation",
        "section_anchor": "section-000",
        "license": "public-domain",
        "reproduction_basis": "full",
        "attribution": "U.S. FDA. Public-domain U.S. government work (illustrative).",
        "rights_url": "https://www.example-public-domain-regulator.gov/legal"
      },
      "applicability_basis": "The workflow produces records that feed a regulated design-control decision; the synthetic public-domain source applies.",
      "confidence": "high",
      "conditional_applicability": false
    },
    {
      "requirement_id": "req_fu_002",
      "requirement_text": "SYNTHETIC ILLUSTRATIVE TEXT (not real regulatory wording): computerised systems used in a trial should be fit for purpose. Cited from a copyrighted source, so only a short verbatim excerpt of the cited clause is carried, not the full text.",
      "source": {
        "url": "https://www.example-license-restricted.org/synthetic-guideline",
        "canonical_document_id": "SYNTHETIC-EX-001",
        "title": "Synthetic copyrighted guideline (illustrative)",
        "issuing_authority": "ICH",
        "jurisdiction": "ICH",
        "document_type": "guideline",
        "section_anchor": "9.3",
        "content_hash": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
        "excerpt": "[SYNTHETIC EXCERPT: illustrative placeholder, not real ICH wording.]",
        "license": "proprietary",
        "reproduction_basis": "excerpt",
        "attribution": "© ICH (illustrative).",
        "rights_url": "https://www.example-license-restricted.org/legal"
      },
      "applicability_basis": "The workflow relies on a computerised system whose output feeds a trial decision; the synthetic copyrighted source applies and is carried as a partial verbatim excerpt of the cited clause.",
      "confidence": "high",
      "conditional_applicability": false
    },
    {
      "requirement_id": "req_ref_003",
      "requirement_text": "SYNTHETIC ILLUSTRATIVE TEXT (not real standard wording): the organisation should maintain a documented quality management procedure. Cited from a paid proprietary standard, so NO text is reproduced; this is a reference only and the reader consults their own licensed copy.",
      "source": {
        "url": "https://www.example-paid-standards-body.org/synthetic-standard",
        "canonical_document_id": "SYNTHETIC-ISO-0000",
        "title": "Synthetic paid standard (illustrative)",
        "issuing_authority": "ISO",
        "jurisdiction": "International",
        "document_type": "other",
        "section_anchor": "clause-0.0",
        "license": "proprietary",
        "reproduction_basis": "reference-only",
        "attribution": "© ISO (illustrative).",
        "rights_url": "https://www.example-paid-standards-body.org/store"
      },
      "applicability_basis": "The workflow operates a QMS process within the scope of the synthetic paid standard; the assertion references the clause without reproducing its text, so the reader consults their own licensed copy.",
      "confidence": "high",
      "conditional_applicability": false
    },
    {
      "requirement_id": "req_sum_004",
      "requirement_text": "SYNTHETIC ILLUSTRATIVE TEXT (not real standard wording): the organisation should perform risk management across the product lifecycle. This requirement is rendered in the producer's own words (a paraphrase of the cited clause), not quoted verbatim.",
      "source": {
        "url": "https://www.example-paid-standards-body.org/synthetic-risk-standard",
        "canonical_document_id": "SYNTHETIC-SUM-001",
        "title": "Synthetic paid risk-management standard (illustrative)",
        "issuing_authority": "ISO",
        "jurisdiction": "International",
        "document_type": "other",
        "section_anchor": "clause-4",
        "license": "proprietary",
        "reproduction_basis": "summary",
        "attribution": "© ISO (illustrative).",
        "rights_url": "https://www.example-paid-standards-body.org/store"
      },
      "applicability_basis": "The workflow makes lifecycle risk decisions within the scope of the synthetic paid standard; the requirement is conveyed as a paraphrase rather than a verbatim quote, so no excerpt is carried.",
      "confidence": "high",
      "conditional_applicability": false
    }
  ],
  "missing_controls": [
    {
      "control": "iso27001:A.8.1.1",
      "rationale": "Synthetic: asset inventory of the system not documented.",
      "criticality": "recommended",
      "related_requirements": ["req_pd_001"]
    }
  ],
  "assumptions_made": [
    {
      "assumption": "The cited sources carry the rights shown; this example exists to demonstrate that provenance is declared per source, not per document.",
      "impact_if_wrong": "If a proprietary source were mislabelled public-domain, a consumer might over-reproduce restricted text.",
      "basis": "Synthetic illustrative assertion."
    }
  ],
  "clarifying_questions": [
    {
      "question": "Are the rights metadata values on each source confirmed against the source's controlling rights page?",
      "would_change": "Affects whether an excerpt may be reproduced verbatim downstream."
    }
  ],
  "out_of_scope": [
    {
      "topic": "Any real regulatory obligation",
      "reason": "This is a synthetic example; it teaches the SourceReference rights-provenance format and carries no real regulatory substance."
    }
  ],
  "verification_steps": [
    {
      "step": "Confirm each source's license value against its controlling rights page (rights_url) before reproducing any excerpt downstream.",
      "type": "source_check",
      "applies_to": "applicable_requirements[1]"
    }
  ],
  "status": "draft",
  "notice": "Synthetic illustrative v0.2 PIF document. Demonstrates per-source rights provenance on SourceReference across all four reproduction_basis values: a public-domain source carried full (verbatim); a copyrighted source (ICH) carried as a partial excerpt; a paid proprietary standard (ISO) carried reference-only (citation plus rights_url, NO excerpt); and a paid proprietary standard paraphrased as a summary (text present in the producer's own words, not quoted). license (native rights) and reproduction_basis (form and extent of the text carried) are declared as separate axes per source; the legal justification is the producer's responsibility, conveyed via license. Requirement text and the excerpt are placeholders, not real regulatory wording."
}