Canada readiness

Canada release readiness

Publicus helps teams prepare evidence for Canadian government and regulated review. It does not certify a system, supplier, or deployment.

What the scan produces

Fix-first package riskBlocked, needs-review, unknown, and unpinned records appear before long evidence lists.

Fresh upstream evidenceObject-specific OSV, CISA KEV, EPSS, NVD, GHSA, deps.dev, and package-health evidence is attached when available.

Review pressureFresh evidence can create ReviewProposal objects. These are review prompts, not silent registry mutations.

Exportable proofThe browser can export JSON and Markdown evidence packs for release review, supplier conversations, or internal tickets.

How this maps to Canada

The readiness block should be used alongside CPCSC supplier-assurance expectations, CCCS AI/ML supply-chain guidance, TBS responsible-AI policy, and standards crosswalks such as NIST AI RMF. Publicus records evidence and review state; it does not replace procurement, legal, or security authority.

Run a dependency scan or read the evidence pack format.