# EM-RSK-01 local evidence

- Claude and Grok agree that WM-KNW-015 owns persistent Risk / Opportunity identity and WM-XCT-027 is a host-scoped assessment-context profile.
- One identifier-unassigned Control root owns definition revisions, owner authority states and time-bounded implementation and operating states.
- Control execution, effectiveness determination, evidence, appetite, acceptance and treatment execution remain external or unowned; no replacement identifier is invented.
- EM-RSK-02 is Audit, Review and Finding, so the earlier treatment delegation is withdrawn.
- WM-ACT-034 remains conditional until a written occupancy crosswalk resolves WM-ACT-033 and WM-XCT-027 and makes population, period, mechanism and evidence mandatory.
- Comparability pins scale, expression, criteria, method, technique, scope, exclusions, horizon and time. Ordinal and scenario modes prohibit unsupported arithmetic.
- A failed execution changes only assessments with matching population, period, mechanism and evidence chain. Policy status never proves effectiveness or closes risk.
- The single frozen audit returned REVISE; all 33 closed items were remediated once without rerun.
- Revision 3 contains 33 stable rules and 33 concrete fixtures. No model, catalogue or runtime identifier is allocated.