Three structural conditions define the institutional environment in which the framework operates:
Visibility Boundary
The boundary at which the compliance instrument loses reach over the systems it is presumed to govern. Operates at three layers: institutional (classification, special operations, covert action), architectural (the structural separation of documentary and technical compliance production within the implementing institution), and technical (the non-interpretability of the systems the instrument is presumed to govern). The instrument has no mechanism to access systems protected by these architectures of restricted visibility.
Contractor-Defined Compliance
The compliance instrument's substantive content is determined by the institutions it is meant to govern. The instrument does not specify scope, criteria, or required performance — the implementing institution does. No independent authority validates whether the institution's interpretation satisfies the underlying standard.
Contractor-Defined Evidence
The evidence supporting compliance claims is produced under conditions the implementing institution controls. The instrument relies on the institution to detect, document, and report the conduct the standard requires. No independent verification mechanism exists. The compliance record is the institution's account of compliance, not an independent assessment of it.