edmeyman/4ts-standard: 5TS v1.2.0 — Provenance

The Five Tests Standard (5TS) is a vendor-neutral conformance standard for proof-carrying decisions in runtime authorization systems. It specifies the tests a control must satisfy to support pre-execution authorization, enforceability at the execution boundary, independently reconstructable verdicts, and defined custody behavior when execution is not authorized. Version 1.2.0 adds Provenance as the fifth normative test. Provenance is the input-side requirement: a control must establish the origin of the inputs a verdict rests on, and must not ground a verdict on inputs whose origin cannot be established. Provenance is origin, not truth. It does not establish that input content is true, complete, current, or substantively sufficient under a domain policy. Provenance is normative in this release but not yet conformance-testable. The machine-checkable conformance bundle remains the v1.0.2 four-test bundle until input-origin binding and validation vectors are defined. Existing four-test bundle conformance claims remain valid, and no implementation must update schemas, validators, or vectors solely because v1.2.0 was published. “4TS” remains the historical name for versions through 1.0.x. “5TS” is the name from v1.2 forward.