Independent reconciliation is a detective control, not an inline gate. Export decision ids and occurrence times from a separate system of record, then compare that set with rawctx answer-audit logs.
Each run binds the reference-set root, rawctx-set root, finding counts, period, app/environment, and reference-source commitment into a receipt anchored by the trust log. Raw decision ids are not exposed in the proof.
