blackmore-technology-group · Sep 25, 2026 · Sep 25, 2026 · Sep 25, 2026
diff --git a/README.md b/README.md
@@ -1,17 +1,27 @@
 # ENTITY-AI
 
-ENTITY v3.4.0 executable AI implementation package.
+**ENTITY v3.4.0 executable AI implementation package.**
 
-This repository configures the **one ENTITY Global Passport** for the AI domain. It does not define a separate passport protocol and does not modify ENTITY core semantics.
+This repository configures the **one ENTITY Global Passport** for AI systems, models, datasets, derived outputs and related governance artifacts. It does not define a separate passport protocol and does not modify ENTITY core semantics.
 
-## Release binding
+[ENTITY](https://github.com/blackmore-technology-group/ENTITY) · [v3.4.0 release](https://github.com/blackmore-technology-group/ENTITY/releases/tag/v3.4.0) · [Global Passport documentation](https://github.com/blackmore-technology-group/ENTITY/blob/main/docs/v3.4/GLOBAL_PASSPORT.md) · [Domain packages](https://github.com/blackmore-technology-group/ENTITY/blob/main/docs/v3.4/DOMAIN_PACKAGES.md)
 
-- Core source: `blackmore-technology-group/ENTITY` PR #41
-- Source head: `2d7529fbadb4dd04840d62b751294bf9a7f70ed5`
-- Release snapshot: `3ff0e51ca2daabf50bc517e9c6e3438e8c150f1560cca6c99621621e3c855a90`
-- Package SHA-256: `4877cb5bc76ef0803eace931ca1a9cba516c01ba94a2e0b4bc71bcb5dc1b0440`
+## What this package is for
+
+Use ENTITY-AI as the starting point when you need persistent provenance, scoped authority, rights and evidence around AI-related assets while keeping model custody, hosting and platform control separate from sovereign authority.
 
-## Required deployment facts
+The v3.4 package includes mappings for **NIST AI RMF**, **SPDX 3** and **CycloneDX**. Those mappings describe correspondence; ENTITY does not redefine the external standards or turn a mapping into certification or regulatory compliance by itself.
+
+Typical evaluation paths include:
+
+- carrying origin, authority and evidence context with models, datasets or derived outputs;
+- recording rights and usage constraints across training, inference or downstream derivation;
+- preserving provenance through provider or platform changes;
+- composing jurisdiction, privacy, trust, technical and AI-domain profiles inside one Global Passport.
+
+## Deploy the package
+
+Required deployment facts:
 
 - `organization`
 - `jurisdiction`
@@ -20,10 +30,34 @@ This repository configures the **one ENTITY Global Passport** for the AI domain.
 
 `deployment.example.json` is intentionally non-production until every `CONFIGURE-ME` value is replaced with organization-specific facts.
 
-## Verify
+```text
+Select package → configure organization facts → connect systems/data → ingest → verify passport → run conformance → deploy
+```
+
+## Verify locally
+
+```bash
+python tools/verify_package.py
+```
+
+The verifier checks the repository inventory and the package/source-release binding.
+
+## Release binding
+
+- Core source: `blackmore-technology-group/ENTITY` PR #41
+- Source head: `2d7529fbadb4dd04840d62b751294bf9a7f70ed5`
+- Release snapshot: `3ff0e51ca2daabf50bc517e9c6e3438e8c150f1560cca6c99621621e3c855a90`
+- Package SHA-256: `4877cb5bc76ef0803eace931ca1a9cba516c01ba94a2e0b4bc71bcb5dc1b0440`
+
+## Go deeper
+
+- [ENTITY v3.4.0](https://github.com/blackmore-technology-group/ENTITY/releases/tag/v3.4.0)
+- [Developer portal](https://github.com/blackmore-technology-group/ENTITY/blob/main/DEVELOPERS.md)
+- [Engineering evidence](https://github.com/blackmore-technology-group/ENTITY/blob/main/docs/ENGINEERING_EVIDENCE.md)
+- [Open contributor tasks](https://github.com/blackmore-technology-group/ENTITY/issues?q=is%3Aissue+is%3Aopen)
 
-Run `python tools/verify_package.py`. The verifier checks the repository inventory and the package/source-release binding.
+## Truth and compliance boundary
 
-## Truth boundary
+External standards remain externally authoritative and are mapped, not redefined. Package verification does **not** establish regulatory compliance, objective external truth, model safety, legal title or accounting fair value. Provider custody or model hosting does not create ENTITY authority.
 
-External standards are mapped, not redefined. Package verification does not establish regulatory compliance, objective external truth, legal title or accounting fair value. Provider custody does not create ENTITY authority.
+Deployment-specific legal, regulatory, safety, security and model-governance determinations remain the responsibility of the deploying organization.
diff --git a/REPOSITORY_MANIFEST.json b/REPOSITORY_MANIFEST.json
@@ -1,90 +1,27 @@
 {
   "domain": "ai",
   "files": [
-    {
-      "path": ".gitattributes",
-      "sha256": "d60f352d0db1404c70afb4bb8b2ca3fd1c610572aa40720e8a0b7baa7885418c"
-    },
-    {
-      "path": ".github/workflows/verify.yml",
-      "sha256": "261f8eba4865fd6b237fd43d8008b9a5f7934d50615454bbc093e4ab5f4d05a8"
-    },
-    {
-      "path": ".gitignore",
-      "sha256": "4cad133d4f0a6cf4bba15f1b8bbae48d6a55f20b94f75487c51a93cc6a5af59f"
-    },
-    {
-      "path": "CODE_OF_CONDUCT.md",
-      "sha256": "075f9820f43599dceb334f3accba68d62c32589e38ef68c750c771e48695eafc"
-    },
-    {
-      "path": "conformance.json",
-      "sha256": "1bc726541e3ce91d108b3307d7dc5ef9215f8caa49ea7a7131f2a29b10359cc3"
-    },
-    {
-      "path": "deployment.example.json",
-      "sha256": "ac103b891ef4611514d1371ef057f7986bb54e5de63b255d912e79e0cbee35d6"
-    },
-    {
-      "path": "deployment.schema.json",
-      "sha256": "5eb88c9a6cb54967bf7f7733d18f84422c044ff0871e6d28d5326fdf15a8ea4c"
-    },
-    {
-      "path": "LICENSE",
-      "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"
-    },
-    {
-      "path": "mappings.json",
-      "sha256": "553d44ba8cc01ac0aa765f2d261632776aacceed1d95acab1dd680acf0d9986d"
-    },
-    {
-      "path": "NOTICE",
-      "sha256": "0d5dbc5d8a225ba5eb152719ae4b0066ca64d3338c7dc857a68f502961a92dda"
-    },
-    {
-      "path": "package.json",
-      "sha256": "112808e5a435a036a5992e035d218fe7556627cc0a3e0ecfe34ef5ceaffa7595"
-    },
-    {
-      "path": "protocol/ENTITY_GLOBAL_PASSPORT.schema.json",
-      "sha256": "4fbfed9be1b1484bc5d28b8101d1c908b2ccced13e4e99ec896c5b054892ebdd"
-    },
-    {
-      "path": "protocol/ENTITY_V3_4_GLOBAL_PASSPORT_CLEANROOM_KIT.min.json",
-      "sha256": "5869a3fd0ed6cb9f65bf4b20c3bd64933cad82f4aef05c5809e2e05af921f230"
-    },
-    {
-      "path": "QUICKSTART.md",
-      "sha256": "e8a8006a98823c6f5a2086a0f093e0c95baeb26159d7d050caa7c41c578ef863"
-    },
-    {
-      "path": "README.md",
-      "sha256": "cafd884e7bf00adda5764f22a53fc9d0d24a5eff8b5ec92f1c4ceec774daefff"
-    },
-    {
-      "path": "sdk/canonical_global_passport_sdk.py",
-      "sha256": "50d40713fe7f8462f54388bd7650705fd3f17027f7692a7cf87bf3ad59230e64"
-    },
-    {
-      "path": "sdk/README.md",
-      "sha256": "9981c36e7b44de00a2a2627376620da3716eebe7f64ff260f1fd0a1290838be4"
-    },
-    {
-      "path": "SECURITY.md",
-      "sha256": "36da06976abc3b01e0963fd84acfc02d995f57a10699c7cf86c23628bea7a5a4"
-    },
-    {
-      "path": "SOURCE_RELEASE.json",
-      "sha256": "cc17fb390fd78082d735dafc0e3e210f5df9104c319c8e1c396b723fc72c4c5a"
-    },
-    {
-      "path": "templates.json",
-      "sha256": "41a8531ba28774db96004b2cfcb9dc5ad979bc11680d4d5d4cc9d06d7691d1f3"
-    },
-    {
-      "path": "tools/verify_package.py",
-      "sha256": "1ad2cd598780182c10e69463ccc97f2417bfc49f18fcc64ac30fca8b687332a1"
-    }
+    {"path": ".gitattributes", "sha256": "d60f352d0db1404c70afb4bb8b2ca3fd1c610572aa40720e8a0b7baa7885418c"},
+    {"path": ".github/workflows/verify.yml", "sha256": "261f8eba4865fd6b237fd43d8008b9a5f7934d50615454bbc093e4ab5f4d05a8"},
+    {"path": ".gitignore", "sha256": "4cad133d4f0a6cf4bba15f1b8bbae48d6a55f20b94f75487c51a93cc6a5af59f"},
+    {"path": "CODE_OF_CONDUCT.md", "sha256": "075f9820f43599dceb334f3accba68d62c32589e38ef68c750c771e48695eafc"},
+    {"path": "conformance.json", "sha256": "1bc726541e3ce91d108b3307d7dc5ef9215f8caa49ea7a7131f2a29b10359cc3"},
+    {"path": "deployment.example.json", "sha256": "ac103b891ef4611514d1371ef057f7986bb54e5de63b255d912e79e0cbee35d6"},
+    {"path": "deployment.schema.json", "sha256": "5eb88c9a6cb54967bf7f7733d18f84422c044ff0871e6d28d5326fdf15a8ea4c"},
+    {"path": "LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"},
+    {"path": "mappings.json", "sha256": "553d44ba8cc01ac0aa765f2d261632776aacceed1d95acab1dd680acf0d9986d"},
+    {"path": "NOTICE", "sha256": "0d5dbc5d8a225ba5eb152719ae4b0066ca64d3338c7dc857a68f502961a92dda"},
+    {"path": "package.json", "sha256": "112808e5a435a036a5992e035d218fe7556627cc0a3e0ecfe34ef5ceaffa7595"},
+    {"path": "protocol/ENTITY_GLOBAL_PASSPORT.schema.json", "sha256": "4fbfed9be1b1484bc5d28b8101d1c908b2ccced13e4e99ec896c5b054892ebdd"},
+    {"path": "protocol/ENTITY_V3_4_GLOBAL_PASSPORT_CLEANROOM_KIT.min.json", "sha256": "5869a3fd0ed6cb9f65bf4b20c3bd64933cad82f4aef05c5809e2e05af921f230"},
+    {"path": "QUICKSTART.md", "sha256": "e8a8006a98823c6f5a2086a0f093e0c95baeb26159d7d050caa7c41c578ef863"},
+    {"path": "README.md", "sha256": "66bee84f4a5d4238ab2c9d219f36823a1ae990e50ad3754daf0f746b3471160a"},
+    {"path": "sdk/canonical_global_passport_sdk.py", "sha256": "50d40713fe7f8462f54388bd7650705fd3f17027f7692a7cf87bf3ad59230e64"},
+    {"path": "sdk/README.md", "sha256": "9981c36e7b44de00a2a2627376620da3716eebe7f64ff260f1fd0a1290838be4"},
+    {"path": "SECURITY.md", "sha256": "36da06976abc3b01e0963fd84acfc02d995f57a10699c7cf86c23628bea7a5a4"},
+    {"path": "SOURCE_RELEASE.json", "sha256": "cc17fb390fd78082d735dafc0e3e210f5df9104c319c8e1c396b723fc72c4c5a"},
+    {"path": "templates.json", "sha256": "41a8531ba28774db96004b2cfcb9dc5ad979bc11680d4d5d4cc9d06d7691d1f3"},
+    {"path": "tools/verify_package.py", "sha256": "1ad2cd598780182c10e69463ccc97f2417bfc49f18fcc64ac30fca8b687332a1"}
   ],
   "package_sha256": "4877cb5bc76ef0803eace931ca1a9cba516c01ba94a2e0b4bc71bcb5dc1b0440",
   "release_snapshot_sha256": "3ff0e51ca2daabf50bc517e9c6e3438e8c150f1560cca6c99621621e3c855a90",