Manufacturing — supplier & audit

Concentration risk and portable audit evidence

One page per vendor (supply/vendor-<name>).

Metadata: audit-score, next-audit, certifications (array), single-source, open-capas.

Concentration risk view:

single-source = true AND audit-score < 0.8

Line-transfer qualification:

certifications contains "ISO-13485"

Export the space as the auditor’s evidence bundle.