Completed papers identify their authors, sources and method, with a publication date and version. Evidence gaps and the limits of conclusions belong beside the argument.
Published papers have accessible HTML editions. Regulatory papers state their source-check date and make clear that they are not legal advice.
A named maintenance owner keeps the source record current. A superseded edition carries its status and a reference to its replacement.
The research agenda sits alongside the practice. Technology and AI governance covers the controls designed into commissioned systems.