Route 116 of 176
External Evidence References
QRCompliance.us · Validation Layer · Source of truth: QRCodex.us
Summary
Not every piece of evidence behind a determination lives inside QRCompliance.us. A laboratory report, an inspection finding, or a third-party certificate may originate and remain in another organization's system entirely. External evidence references define how QRCompliance.us cites that outside record — identifying it precisely enough to be checked, without duplicating its full content or asserting ownership of something it does not control.
Citing an external record is not the same as validating its underlying content. QRCompliance.us can rely on an external reference as evidence supporting a determination while still being clear that responsibility for the accuracy of that external record's substance rests with the party that issued it.
A compliance determination is only as good as the evidence behind it, and a meaningful share of that evidence is generated by parties other than QRCompliance.us itself — testing laboratories, inspection bodies, certification schemes, government registries. When QRCompliance.us relies on this material, it needs a disciplined way to point to it precisely, so that anyone reviewing a determination later can trace exactly which external record supported it.
The obvious alternative — copying the full external record into QRCompliance.us's own system every time it is used — creates problems of its own. Copies drift out of sync with the original the moment the source is revised, corrected, or withdrawn. A reference, by contrast, points to the authoritative source and inherits its updates rather than freezing a stale snapshot as if it were permanent.
This route defines what a reference has to contain to be usable, what QRCompliance.us is and is not asserting when it cites one, and what happens when a referenced external record is later corrected, revoked or found unavailable. None of this authorizes QRCompliance.us to treat an external record as its own or to certify anything on the strength of a citation alone — a reference supports evaluation; it does not substitute for it.
01Plain-English Definition
An external evidence reference is a precise, checkable citation to a record held and controlled outside QRCompliance.us — such as a laboratory report, inspection finding or third-party certificate — used to support a determination without copying the record's full content into QRCompliance.us's own system.
A reference is more than a hyperlink. It has to identify the issuing party, the specific record, and, where the source supports it, a way to confirm the record has not been altered since it was cited.
This route governs the discipline of citing external evidence correctly. It does not govern the technical means of connecting to external systems — that is addressed by the routes on external verification sources and API connections — nor does it govern translating QRCompliance.us's own terms into an external vocabulary, which is the separate discipline of standards mapping.
02What Makes A Reference Usable
A citation to an external record is only useful if it contains enough information for someone else to locate, and where possible verify, the same record later.
- The issuing party is identified by name, so the source of the evidence is never ambiguous.
- The specific record is identified precisely — a report number, certificate identifier or inspection reference — not merely a general description of its type.
- A locator or access path is captured where the source permits it, so the record can be retrieved directly rather than reconstructed from memory.
- The date the record was issued, and the date it was cited by QRCompliance.us, are both recorded, since the two dates can diverge significantly.
- Where the source provides one, an integrity marker — such as a checksum or signed reference — is captured so a later alteration to the source record can be detected.
A reference missing any of these elements is treated as incomplete and is not relied upon as a basis for a determination until it is completed or replaced with a fuller citation.
03What Citing A Reference Does And Does Not Assert
Citing an external record carries real weight, but it does not carry every kind of weight a reader might assume.
What citation asserts
That a specific, identifiable external record exists, was issued by the named party, and was available and considered at the time the determination was made.
What citation does not assert
That QRCompliance.us has independently verified the substantive accuracy of the external record's content, or that it takes ownership of the record's ongoing correctness.
Where responsibility for content sits
With the issuing party. If a laboratory's report contains an error, responsibility for that error belongs to the laboratory, not to QRCompliance.us for having cited it accurately.
04Operational Flow
Building and maintaining a usable external evidence reference follows a consistent sequence from first citation through ongoing monitoring.
- 1External record is identifiedA specific external record relevant to a determination — a report, certificate or finding — is identified and its issuing party confirmed.
- 2Reference is captured with a locatorThe record's identifying details, locator, issue date and, where available, integrity marker are captured as a complete reference.
- 3Reference is attached to the determinationThe reference is linked to the specific evaluation it supports, so anyone reviewing the determination can trace it back to the cited source.
- 4Availability is periodically checkedThe reference is checked against its source at defined intervals to confirm the record remains available and unaltered.
- 5Source change triggers reassessmentIf the source record has been corrected, withdrawn or altered, the determination that relied on it is flagged for reassessment.
A reference that can no longer be verified against its source is not deleted from the record — it is flagged as unverifiable, and the determination it supported is reassessed on that basis.
05Handling A Withdrawn Or Corrected Source
External records are not static. A laboratory can reissue a corrected report; a certification body can withdraw a certificate. QRCompliance.us has to be able to respond to each of these states differently.
| State | Entered When | Left When |
|---|---|---|
| Source unchanged | Periodic check confirms the referenced record is unaltered and still available at its original locator | No action required; reference remains valid as originally captured |
| Source corrected | The issuing party revises the original record, producing a new version with updated content | Original determination is flagged and reassessed against the corrected record |
| Source withdrawn | The issuing party formally withdraws the record, such as revoking a certificate | Determinations relying on the withdrawn record are flagged as no longer supported by that evidence |
| Source unavailable | The record can no longer be retrieved at its locator, without confirmation of correction or withdrawal | Reference is marked unverifiable pending confirmation from the issuing party |
06System Relationship
System Chain — Six Locked Entities
- 1QuickResponseCode.usRoot / System EntryPublic entry point to the QR infrastructure.
- 2QRProtocol.usGovernance (Rules)Writes and governs the applicable rules.
- 3QRCompliance.usValidationValidates compliance readiness against applicable rules and conditions.
- 4QRCertified.usCertification AuthorityAuthorizes the QR for certification.
- 5QRRegistered.usRegistration ResultMandatorily registers the authorized QR.
- 6QRCodex.usOperations / RecordsRecords, operates, logs and preserves canonical operational truth.
No registration → no certified QR output.
External evidence references connect QRCompliance.us's determinations to the outside world's own records, and each layer plays a distinct role in keeping that connection accurate and accountable.
| Layer | Relationship To External Evidence References |
|---|---|
| ROOT — QuickResponseCode.us | Anchors the identity that an external record is being cited in support of, keeping the citation tied to a stable subject. |
| GOVERNANCE — QRProtocol.us | Defines which categories of external source may be cited as evidence and what a complete reference must contain. |
| VALIDATION — QRCompliance.us | Cites external records as supporting evidence for its determinations, without asserting ownership of their substantive content. |
| AUTHORIZATION — QRCertified.us | Relies on referenced external evidence, alongside internal evaluation, when a certification decision depends in part on a third-party record. |
| REGISTRATION — QRRegistered.us | Reflects in an identity's record which external references were relied upon in reaching its current condition. |
| OPERATIONS — QRCodex.us | Retains the permanent record of every reference cited, its verification history, and any reassessment triggered by a source change. |
Where a cited external record is later found to conflict with QRCodex.us's own recorded history of the reference, Codex governs and the determination is reassessed accordingly.
What This Does — And Does Not — Do
Does
- ✓Cite external evidence with enough identifying detail — issuer, record, locator, dates — to be located and checked later
- ✓Attach a captured reference directly to the specific determination it supports
- ✓Periodically check a referenced external record's continued availability and integrity
- ✓Flag a determination for reassessment when its referenced source is corrected, withdrawn or found unavailable
- ✓Preserve responsibility for an external record's substantive content with the party that issued it
- ✓Retain a full history of every reference cited and its verification status over time
Does Not
- ✕Copy an external record's full content into QRCompliance.us's own system as a substitute for citing it precisely
- ✕Assert that citing an external record independently verifies the accuracy of its substance
- ✕Treat an incomplete reference — missing issuer, locator or dates — as a sufficient basis for a determination
- ✕Delete a reference outright when its source becomes unavailable, rather than flagging it as unverifiable
- ✕Certify or register an identity on the strength of a citation alone, without the underlying evaluation it supports
- ✕Continue relying on a determination after its supporting reference is confirmed withdrawn, without reassessment
Related Routes
Common Questions
Why not just copy the external record into QRCompliance.us instead of referencing it?
A copy freezes a snapshot that can drift out of sync with the source. A reference points to the authoritative record and can detect when that source is later corrected, withdrawn or altered.
Does citing a laboratory report mean QRCompliance.us has verified the lab's findings itself?
No. Citation confirms the report exists, was issued by the named laboratory, and was considered in reaching a determination — not that QRCompliance.us has independently verified the lab's substantive findings.
What happens if the external source becomes unreachable?
The reference is flagged as unverifiable rather than deleted, and the determination it supported is reassessed pending confirmation from the issuing party.
Who is responsible if a cited external record turns out to be wrong?
The issuing party. QRCompliance.us's responsibility is to cite the record accurately and to reassess its determination once an error in the source is confirmed.
Is an incomplete citation ever usable as evidence?
No. A reference missing the issuer, specific record identifier, locator or dates is treated as incomplete and is not relied upon until it is completed.