What counts as evidence here
Evidence is a public record anyone can re-check: a DNS answer returned by a resolver, an entry in a government catalog, a registration record in a public IP registry. If a claim cannot be traced to one of those, AUGI labels it as context or opinion — never as fact.
For example, when a domain check reports "no DMARC policy", the underlying evidence is the exact DNS query and response: the resolver asked for _dmsarc-style TXT records and received none. You can reproduce that query yourself in seconds, and members see the raw answer in their report.
Why scores are summaries, not verdicts
A posture score condenses several checks into one number so it can be compared over time. It is a summary of the evidence, not a judgment about the owner of a domain, server, or IP address. Two domains with the same score can have very different stories behind it.
That is why every AUGI report pairs the score with its raw evidence and an explanation of what each signal can and cannot prove. A missing record is a configuration gap — not proof of compromise, and never an accusation.
Reproducibility is the standard
Every report lists its sources with timestamps. If a source is down, the report says so instead of filling the gap with estimates. This is the same standard used by public vulnerability catalogs: a known-exploited entry exists because a government agency verified exploitation, not because a model guessed it.
Educational information about AUGI methods. It is not legal, financial, or incident-response advice.
