# Assess an implementation independently

Apply the published requirements to an exact capability, retain the evidence, and separate local checks from full operating assessment.

Canonical: https://docs.bankeiz.com/conformance/
Reviewed: 2026-10-25; coordinated packages 129.0.0; ruleset 127.0.0.

## Conformance is scoped evidence

Any compatible implementation can be assessed without a Bankeiz account, purchase, permission or badge. Apply the same published requirements to the exact receiver role, capability, build, rail, trust roots/policy, runtime and device path. A package name, schema-valid report or successful sandbox cannot stand in for actual financial and protected-custody evidence.

**Keep three kinds of result separate**

| Result | What it establishes |
| --- | --- |
| Engineering checks | Assertions at the recorded source/build and fixture scope. |
| Public integration contract | The synthetic language-neutral adapter testbench and exact transcript. |
| Independent operating assessment | Accepted evidence for every applicable control on the actual assessed implementation/environment. |

## Run the local engineering tools

```sh
npm run release:check
npm run receiver:check
node scripts/conformance-reference.mjs
node scripts/conformance-contract.mjs --adapter node scripts/conformance-adapter.mjs
node scripts/conformance-contract.mjs --verify transcript.json
node scripts/conformance-contract.mjs --verify credential.png
```

Run from the matching Bank source checkout with its installed dependencies and documented Node runtime.

The selected adapter runner performs bounded synthetic request/response cases. A proof-bearing credential PNG is canonically verified before its holder/artwork/evidence projection. These local results do not authorize credit or qualify an institution’s production custody. Keep the transcript and source/resource hashes with their original scope.

## Perform the complete assessment

1. **Scope the implementation** — Record source/build/resource hashes, adapter, roots/policy, rails, realm, hardware and versions.
2. **Read each applicable requirement** — Use exact original units, current heads and verified causal coordinates. Justify non-applicability normatively.
3. **Exercise positive and refusal cases** — Include wrong recipient/rail, altered proof, missing parents, concurrency, stale heads and interruption/restart.
4. **Retain independent evidence** — Keep complete originals, source heads, exact consent/requests, accepted/refused results and protected-device evidence.
5. **Review and record findings** — An independent reviewer resolves the sources and actual observations, then accepts or rejects each control with rationale.
6. **Remediate and rerun** — Append corrected evidence without hiding the old finding or abandoning an unknown operation.

## Use the correct report format

**Two application report formats have different purposes**

| Format | Purpose |
| --- | --- |
| receiz.bank.external-assessment.v1 | Partial automated gap review; use conformance-report.template.json. |
| receiz.bank.independent-assessment.v1 | Full manual/physical reviewer program with sixteen controls; use the independent-assessment template/schema. |

The complete record explicitly is not machine proof. Automated report upload does not establish every host/hardware/independent fact: the implementation deliberately keeps completeIndependentEvidenceEstablished false. Missing or unsupported required evidence remains missing-proof. Do not feed the full reviewer template to the partial CLI and describe a schema check as complete conformance.

## Publish exact scope and limitations

Conclude conforming for the assessed capability only after every applicable control has accepted evidence and exclusions have justified applicability. Otherwise state does not pass or conformance not demonstrated with the concrete missing/invalid/violating evidence. Publish safe scope, hashes, procedures and authorized references; private originals stay under protected custody. Reassess affected controls after package, host, custody or execution changes.

- [Inspect full public conformance tools](https://bankeiz.com/conformance/)

## Implementation sources

- [Sixteen receiving requirements](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/institution/receiving-standard.md)
- [Full independent assessment procedure](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/docs/conformance/independent-assessment-procedure.md)
- [Complete sixteen-control reviewer record](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/institution/conformance-independent-assessment.template.json)
- [Partial automated gap-review input](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/institution/conformance-report.template.json)
- [Automated assessment limits](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/src/conformance/assessment.ts)

## Related documentation

- [Build an implementation of the standard](https://docs.bankeiz.com/integrations/)
- [Verify an Original independently](https://docs.bankeiz.com/verification/)
- [Use proof and Notes offline](https://docs.bankeiz.com/offline/)
- [Versions, schemas and implementation status](https://docs.bankeiz.com/compatibility/)