A machine-readable vocabulary covering NIS 2 governance (Art. 20), technical and organizational measures (Art. 21.2 a–j), incident reporting (Art. 23), network architecture controls, and supervision/enforcement (Art. 32–34) — one hundred questions, each closing on what independent, pre-execution proof adds that self-generated internal records cannot.

Automated systems across finance, customs, and logistics now face the same fatal flaw: they execute without independently verifiable proof of human authorization. SOURCE 0 introduces a Governance Proof Layer that seals intent before execution—hardware‑attested, dual‑timestamped, and judicially escrowed—to make every automated decision opposable, auditable, and defensible under DORA, NIS 2, ICS2, and the EU AI Act.