E.17.ID.CR:5.4.6 - Compliance and release-review comparison case
Source slice. An internal control checklist and a vendor compliance bulletin are already available for the same release candidate and the same declared control scope.
Comparative review unit. For release review, the vendor bulletin foregrounds protocol conformance more than rollback evidence, while the internal checklist foregrounds rollback evidence more than protocol conformance; this comparison helps frame the review, but it is not yet a release gate or equivalence claim.
Working-boundary use. This is the same stay-here case under release or compliance pressure: the comparison unit is already stable enough, so the primary question is the bounded contrast rather than local repair or PublicationUnit stabilization.
Why it stays here:
- the comparison criterion is explicit and bounded to one review task;
- the source references remain visible and the same release candidate stays in view;
- the review unit helps an engineer-manager see a review asymmetry without laundering gate authority.