Structural validity does not prove that Microsoft Excel, Word, PowerPoint, LibreOffice, a browser viewer, or a PDF processor will render the same result.
An application check should record:
- exact output SHA-256;
- application name, build, channel, architecture, and operating system;
- installed fonts and locale;
- open, repair-warning, recalculation, save, and close outcomes;
- page, slide, or sheet captures where the profile requires visual evidence;
- any changed package or semantic hash after application save;
- evidence artifact hashes and timestamp.
Publish support only for tested versions and environments. Keep current and N-1 baselines if the assurance offer promises them. A pass in one app does not carry over to another.