{
  "format": "palo-semantic-change-impact",
  "schemaVersion": "1.0.0",
  "changeImpactId": "https://paloframework.org/semantic/change-impact/v3-to-v3-1",
  "fromVersion": "3.0.0",
  "toVersion": "3.1.0",
  "assessedAt": "2026-08-23",
  "status": "approved-for-release",
  "compatibilityPolicy": "Existing P1/P2 and v3.0 evidence contracts remain supported. PALO v3.1 adds conditional control-pack applicability and domain evidence contracts without changing the six-phase lifecycle or legacy Case File format.",
  "changes": [
    { "changeId": "CHANGE-01", "category": "semantic-model", "summary": "Add twelve canonical governance domains with explicit completion levels and residual authority boundaries.", "compatibility": "additive", "affectedArtifacts": ["data/governance-control-packs.json", "schemas/palo-governance-control-packs.schema.json"], "requiredAction": "Resolve each applicable domain through evidence or a reasoned accountable non-applicability decision." },
    { "changeId": "CHANGE-02", "category": "lifecycle", "summary": "Separate unconditional gate controls from applicability-dependent control-pack requirements.", "compatibility": "additive", "affectedArtifacts": ["data/decision-gates.json", "schemas/palo-decision-gates.schema.json", "data/lifecycle-core.json"], "requiredAction": "Gate implementations must evaluate conditional control applicability before a proceed decision." },
    { "changeId": "CHANGE-03", "category": "decision", "summary": "Define fail-closed stop conditions and production-admission decisions for governance domains.", "compatibility": "additive", "affectedArtifacts": ["data/governance-control-packs.json", "schemas/palo-production-profile.schema.json"], "requiredAction": "Do not translate schema validity or reference-runtime tests into a production admission claim." },
    { "changeId": "CHANGE-04", "category": "evidence", "summary": "Add structured contracts for system cards, appeals, Article 50, data lineage, GPAI, incidents, retirement, AIMS and runtime admission.", "compatibility": "additive", "affectedArtifacts": ["schemas/palo-governance-assurance-record.schema.json", "schemas/palo-system-card.schema.json", "schemas/palo-data-lineage-record.schema.json"], "requiredAction": "Populate contracts with deployment-specific evidence and evaluate claims before gate acceptance." },
    { "changeId": "CHANGE-05", "category": "mapping", "summary": "Expand atomic control, indicator, gate and source mappings for the v3.1 control plane.", "compatibility": "generated-projection", "affectedArtifacts": ["data/semantic-mappings.json"], "requiredAction": "Regenerate mappings after any registry change and preserve conditional coverage semantics." },
    { "changeId": "CHANGE-06", "category": "release", "summary": "Bind control, indicator, gate, source and control-pack registries into the semantic release manifest.", "compatibility": "additive", "affectedArtifacts": ["data/semantic-release-manifest.json"], "requiredAction": "Use the v3.1 manifest digest when evaluating or exchanging v3.1 governance evidence." },
    { "changeId": "CHANGE-07", "category": "user-experience", "summary": "Correct Risk Tiering authority claims and update Regulatory Watch for active Article 50 guidance.", "compatibility": "generated-projection", "affectedArtifacts": ["PALO_RiskTiering.html", "PALO_RegulatoryWatch.html"], "requiredAction": "Present tiering only as an initial non-authoritative screening hypothesis requiring current source review." }
  ],
  "migrationGates": [
    "All semantic, control-pack and domain evidence schemas and fixtures validate.",
    "Explorer projection is deterministic and exact.",
    "Every mapping is atomic and resolves to existing registry IDs.",
    "Every release item digest matches its published source file.",
    "Every governance-pack control is integrated into at least one lifecycle gate.",
    "No existing P1/P2 or v3.0 consumer is required to adopt a new runtime record."
  ]
}