{
  "runId": "marketlink-uat-2026-05-16T02-57-33-389Z",
  "generatedAt": "2026-05-16T02:57:33.389Z",
  "source": "marketlink-uat-live-collector",
  "targetBaseUrl": "https://UAT-MarketLink.healthplan.com",
  "sourceLabel": "Current UAT-MarketLink.healthplan.com evidence snapshot",
  "manifestUrl": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json",
  "directoryCsvUrl": "/docs/marketlink-evidence/marketlink-uat-evidence-directory.csv",
  "totalFiles": 42,
  "totalBytes": 5693714,
  "imageCount": 12,
  "folderCount": 6,
  "modules": [
    {
      "id": "application-ui-toolkit",
      "folder": "application-ui-toolkit",
      "title": "Application UI Toolkit",
      "summary": "Consumer, broker, and application-facing screens captured as auditable UI evidence.",
      "requirementBasis": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.",
      "count": 6,
      "sizeBytes": 1358629,
      "imageCount": 3,
      "jsonCount": 3,
      "documentCount": 0,
      "downloadUrl": "/docs/marketlink-evidence/packages/marketlink-uat-application-ui-toolkit.zip",
      "packageSha256": "5178d6e52d11521a1ddf85b998283c0de87e5f207aeca678fc1a7297b423f627",
      "packageSizeBytes": 1295432
    },
    {
      "id": "identity-proofing",
      "folder": "identity-proofing",
      "title": "Identity Proofing",
      "summary": "Login, authentication boundary, and identity entry points for RIDP/RBA-oriented evidence.",
      "requirementBasis": "RIDP/RBA/GetRecord evidence, identity assurance, fallback and documentation path proof.",
      "count": 4,
      "sizeBytes": 560931,
      "imageCount": 2,
      "jsonCount": 2,
      "documentCount": 0,
      "downloadUrl": "/docs/marketlink-evidence/packages/marketlink-uat-identity-proofing.zip",
      "packageSha256": "fcf9d82a7be659445ad482ca679a763f91da465068ade3e7df600e65a682b9ea",
      "packageSizeBytes": 523840
    },
    {
      "id": "registration-onboarding",
      "folder": "registration-onboarding",
      "title": "Registration and Onboarding",
      "summary": "Broker, agent, and user onboarding gates with role-aware access evidence.",
      "requirementBasis": "Registration, MFA setup, approval gates, and role-specific access controls.",
      "count": 4,
      "sizeBytes": 581922,
      "imageCount": 2,
      "jsonCount": 2,
      "documentCount": 0,
      "downloadUrl": "/docs/marketlink-evidence/packages/marketlink-uat-registration-onboarding.zip",
      "packageSha256": "c32bf18f0ffe20e989734e1c0f989cf7b642855df9208ff3bfb18b30c53d3a1a",
      "packageSizeBytes": 545367
    },
    {
      "id": "communications-toolkit",
      "folder": "communications-toolkit",
      "title": "Communications Toolkit",
      "summary": "Legal, privacy, non-discrimination, and consumer notice evidence.",
      "requirementBasis": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "count": 8,
      "sizeBytes": 1777979,
      "imageCount": 4,
      "jsonCount": 4,
      "documentCount": 0,
      "downloadUrl": "/docs/marketlink-evidence/packages/marketlink-uat-communications-toolkit.zip",
      "packageSha256": "b195c759b62d807476b30f7f12acbb0986234ba40118bade6e991039a53c457a",
      "packageSizeBytes": 1656361
    },
    {
      "id": "api-functional-integration-toolkit",
      "folder": "api-functional-integration-toolkit",
      "title": "API Functional Integration Toolkit",
      "summary": "Sessionless API probes and response captures that demonstrate integration surface readiness.",
      "requirementBasis": "API Functional Integration Toolkit request/response evidence, FIT traceability, payload and endpoint behavior.",
      "count": 3,
      "sizeBytes": 2429,
      "imageCount": 0,
      "jsonCount": 3,
      "documentCount": 0,
      "downloadUrl": "/docs/marketlink-evidence/packages/marketlink-uat-api-functional-integration-toolkit.zip",
      "packageSha256": "bec9d9b388152ded122d3ff9271799b1988be5669faa101b22d31ab36b2dae4d",
      "packageSizeBytes": 2334
    },
    {
      "id": "s3p-security-privacy",
      "folder": "s3p-security-privacy",
      "title": "S3P / SSPP Security and Privacy Package",
      "summary": "Security, privacy, SSPP, SAR, POA&M, ISA, ARC-AMPE, and MARS-E evidence package material.",
      "requirementBasis": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "count": 17,
      "sizeBytes": 1411824,
      "imageCount": 1,
      "jsonCount": 2,
      "documentCount": 14,
      "downloadUrl": "/docs/marketlink-evidence/packages/marketlink-uat-s3p-security-privacy.zip",
      "packageSha256": "b374341ce340065aadf4e372fec84c149d3069f3171494b10266ab917eaf345d",
      "packageSizeBytes": 1250225
    }
  ],
  "familySummary": [
    {
      "family": "Application UI Toolkit",
      "count": 6,
      "sizeBytes": 1358629
    },
    {
      "family": "Identity Proofing",
      "count": 4,
      "sizeBytes": 560931
    },
    {
      "family": "Registration and Onboarding",
      "count": 4,
      "sizeBytes": 581922
    },
    {
      "family": "Communications Toolkit",
      "count": 8,
      "sizeBytes": 1777979
    },
    {
      "family": "API Functional Integration Toolkit",
      "count": 3,
      "sizeBytes": 2429
    },
    {
      "family": "S3P / SSPP Security and Privacy Package",
      "count": 17,
      "sizeBytes": 1411824
    }
  ],
  "folders": [
    {
      "folder": "application-ui-toolkit",
      "count": 6,
      "sizeBytes": 1358629
    },
    {
      "folder": "identity-proofing",
      "count": 4,
      "sizeBytes": 560931
    },
    {
      "folder": "registration-onboarding",
      "count": 4,
      "sizeBytes": 581922
    },
    {
      "folder": "communications-toolkit",
      "count": 8,
      "sizeBytes": 1777979
    },
    {
      "folder": "api-functional-integration-toolkit",
      "count": 3,
      "sizeBytes": 2429
    },
    {
      "folder": "s3p-security-privacy",
      "count": 17,
      "sizeBytes": 1411824
    }
  ],
  "entries": [
    {
      "id": "uat-api-01-api-health",
      "path": "api-functional-integration-toolkit/json-responses/01-api-health.json",
      "name": "01-api-health.json",
      "folder": "api-functional-integration-toolkit",
      "moduleId": "api-functional-integration-toolkit",
      "moduleTitle": "API Functional Integration Toolkit",
      "extension": "json",
      "kind": "api-response-json",
      "family": "API Functional Integration Toolkit",
      "label": "API health endpoint response evidence",
      "route": "/api/health",
      "finalUrl": "https://uat-marketlink.healthplan.com/api/health",
      "status": 200,
      "controlRefs": [
        "API Functional Integration Toolkit"
      ],
      "requirementRefs": [
        "health-probe",
        "service-availability"
      ],
      "evidenceUse": "API Functional Integration Toolkit request/response evidence, FIT traceability, payload and endpoint behavior.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 666,
      "modifiedIso": "2026-05-16T02:57:33.296Z",
      "sha256": "7d20d0b8b1b0e10f65ddffa7dfc8d377db13db8597a711c044a1e797921495a4",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/api-functional-integration-toolkit/json-responses/01-api-health.json"
    },
    {
      "id": "uat-api-02-api-auth-providers",
      "path": "api-functional-integration-toolkit/json-responses/02-api-auth-providers.json",
      "name": "02-api-auth-providers.json",
      "folder": "api-functional-integration-toolkit",
      "moduleId": "api-functional-integration-toolkit",
      "moduleTitle": "API Functional Integration Toolkit",
      "extension": "json",
      "kind": "api-response-json",
      "family": "API Functional Integration Toolkit",
      "label": "Authentication provider response evidence",
      "route": "/api/auth/providers",
      "finalUrl": "https://uat-marketlink.healthplan.com/api/auth/providers",
      "status": 200,
      "controlRefs": [
        "API Functional Integration Toolkit",
        "Identity Proofing"
      ],
      "requirementRefs": [
        "auth-provider-discovery",
        "sessionless-api-probe"
      ],
      "evidenceUse": "API Functional Integration Toolkit request/response evidence, FIT traceability, payload and endpoint behavior.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 1149,
      "modifiedIso": "2026-05-16T02:57:33.327Z",
      "sha256": "f1045afdb4bc3d4569764b82d4935135ffc87328f4d084eb9a5fb625578476a5",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/api-functional-integration-toolkit/json-responses/02-api-auth-providers.json"
    },
    {
      "id": "uat-api-03-api-auth-csrf",
      "path": "api-functional-integration-toolkit/json-responses/03-api-auth-csrf.json",
      "name": "03-api-auth-csrf.json",
      "folder": "api-functional-integration-toolkit",
      "moduleId": "api-functional-integration-toolkit",
      "moduleTitle": "API Functional Integration Toolkit",
      "extension": "json",
      "kind": "api-response-json",
      "family": "API Functional Integration Toolkit",
      "label": "CSRF endpoint response boundary evidence",
      "route": "/api/auth/csrf",
      "finalUrl": "https://uat-marketlink.healthplan.com/api/auth/csrf",
      "status": 200,
      "controlRefs": [
        "API Functional Integration Toolkit",
        "Security Controls"
      ],
      "requirementRefs": [
        "csrf-boundary",
        "request-response-capture"
      ],
      "evidenceUse": "API Functional Integration Toolkit request/response evidence, FIT traceability, payload and endpoint behavior.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 614,
      "modifiedIso": "2026-05-16T02:57:33.362Z",
      "sha256": "efb0147af62c72d2e34ad71741a1233e43170cf33c0d2a784bf11509e599ff07",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/api-functional-integration-toolkit/json-responses/03-api-auth-csrf.json"
    },
    {
      "id": "uat-01-home-page-state",
      "path": "application-ui-toolkit/json-responses/01-home-page-state.json",
      "name": "01-home-page-state.json",
      "folder": "application-ui-toolkit",
      "moduleId": "application-ui-toolkit",
      "moduleTitle": "Application UI Toolkit",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Application UI Toolkit",
      "label": "UAT homepage and broker access entry point page-state JSON",
      "route": "/",
      "finalUrl": "https://uat-marketlink.healthplan.com/",
      "status": 200,
      "controlRefs": [
        "Application UI Toolkit",
        "Communications Toolkit"
      ],
      "requirementRefs": [
        "consumer-broker-entry",
        "standard-disclaimer-visibility"
      ],
      "evidenceUse": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 4749,
      "modifiedIso": "2026-05-16T02:57:24.048Z",
      "sha256": "7e6e622590fef83faf4456d99c415cbb458bd2ad225d3a45e24d7903f685b5b8",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/application-ui-toolkit/json-responses/01-home-page-state.json"
    },
    {
      "id": "uat-02-application-new-page-state",
      "path": "application-ui-toolkit/json-responses/02-application-new-page-state.json",
      "name": "02-application-new-page-state.json",
      "folder": "application-ui-toolkit",
      "moduleId": "application-ui-toolkit",
      "moduleTitle": "Application UI Toolkit",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Application UI Toolkit",
      "label": "Application launch and access-control redirect state page-state JSON",
      "route": "/application/new",
      "finalUrl": "https://uat-marketlink.healthplan.com/auth/login?callbackUrl=%2Fapplication%2Fnew",
      "status": 200,
      "controlRefs": [
        "Application UI Toolkit",
        "Registration and Onboarding"
      ],
      "requirementRefs": [
        "application-start",
        "authorization-gate"
      ],
      "evidenceUse": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 4733,
      "modifiedIso": "2026-05-16T02:57:24.963Z",
      "sha256": "7e75601295b1acb6a5ccd9b48164b259fb6370d3e460462dca220f95a14e94d5",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/application-ui-toolkit/json-responses/02-application-new-page-state.json"
    },
    {
      "id": "uat-03-portal-page-state",
      "path": "application-ui-toolkit/json-responses/03-portal-page-state.json",
      "name": "03-portal-page-state.json",
      "folder": "application-ui-toolkit",
      "moduleId": "application-ui-toolkit",
      "moduleTitle": "Application UI Toolkit",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Application UI Toolkit",
      "label": "Portal landing and authenticated boundary evidence page-state JSON",
      "route": "/portal",
      "finalUrl": "https://uat-marketlink.healthplan.com/portal",
      "status": 200,
      "controlRefs": [
        "Application UI Toolkit"
      ],
      "requirementRefs": [
        "portal-boundary",
        "consumer-workflow"
      ],
      "evidenceUse": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 4941,
      "modifiedIso": "2026-05-16T02:57:25.756Z",
      "sha256": "01a184d5930e2e062502caef7d003ddc29f26d1b57d6a094033af8512eaabef3",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/application-ui-toolkit/json-responses/03-portal-page-state.json"
    },
    {
      "id": "uat-01-home-screenshot",
      "path": "application-ui-toolkit/screenshots/01-home.png",
      "name": "01-home.png",
      "folder": "application-ui-toolkit",
      "moduleId": "application-ui-toolkit",
      "moduleTitle": "Application UI Toolkit",
      "extension": "png",
      "kind": "screenshot",
      "family": "Application UI Toolkit",
      "label": "UAT homepage and broker access entry point",
      "route": "/",
      "finalUrl": "https://uat-marketlink.healthplan.com/",
      "status": 200,
      "controlRefs": [
        "Application UI Toolkit",
        "Communications Toolkit"
      ],
      "requirementRefs": [
        "consumer-broker-entry",
        "standard-disclaimer-visibility"
      ],
      "evidenceUse": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 511156,
      "modifiedIso": "2026-05-16T02:57:24.048Z",
      "sha256": "c5fff1f7ef2d95a4492529f6c035136d122fe3e25daa2faa72f5924a7bf7ff2d",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/application-ui-toolkit/screenshots/01-home.png"
    },
    {
      "id": "uat-02-application-new-screenshot",
      "path": "application-ui-toolkit/screenshots/02-application-new.png",
      "name": "02-application-new.png",
      "folder": "application-ui-toolkit",
      "moduleId": "application-ui-toolkit",
      "moduleTitle": "Application UI Toolkit",
      "extension": "png",
      "kind": "screenshot",
      "family": "Application UI Toolkit",
      "label": "Application launch and access-control redirect state",
      "route": "/application/new",
      "finalUrl": "https://uat-marketlink.healthplan.com/auth/login?callbackUrl=%2Fapplication%2Fnew",
      "status": 200,
      "controlRefs": [
        "Application UI Toolkit",
        "Registration and Onboarding"
      ],
      "requirementRefs": [
        "application-start",
        "authorization-gate"
      ],
      "evidenceUse": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 460843,
      "modifiedIso": "2026-05-16T02:57:24.962Z",
      "sha256": "dd0247080f8f4f2267a11ecfd794483a17fbc1319b792fa1be5503342d26cbb9",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/application-ui-toolkit/screenshots/02-application-new.png"
    },
    {
      "id": "uat-03-portal-screenshot",
      "path": "application-ui-toolkit/screenshots/03-portal.png",
      "name": "03-portal.png",
      "folder": "application-ui-toolkit",
      "moduleId": "application-ui-toolkit",
      "moduleTitle": "Application UI Toolkit",
      "extension": "png",
      "kind": "screenshot",
      "family": "Application UI Toolkit",
      "label": "Portal landing and authenticated boundary evidence",
      "route": "/portal",
      "finalUrl": "https://uat-marketlink.healthplan.com/portal",
      "status": 200,
      "controlRefs": [
        "Application UI Toolkit"
      ],
      "requirementRefs": [
        "portal-boundary",
        "consumer-workflow"
      ],
      "evidenceUse": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 372207,
      "modifiedIso": "2026-05-16T02:57:25.755Z",
      "sha256": "79c3f1ae49f0dc8130aed27168abe67788e8fa6f72d54ad6b6582158827bf9c5",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/application-ui-toolkit/screenshots/03-portal.png"
    },
    {
      "id": "uat-08-privacy-page-state",
      "path": "communications-toolkit/json-responses/08-privacy-page-state.json",
      "name": "08-privacy-page-state.json",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Communications Toolkit",
      "label": "Privacy notice evidence page-state JSON",
      "route": "/legal/privacy",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/privacy",
      "status": 200,
      "controlRefs": [
        "Communications Toolkit",
        "Privacy Controls"
      ],
      "requirementRefs": [
        "privacy-notice",
        "consumer-disclosure"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 5078,
      "modifiedIso": "2026-05-16T02:57:29.904Z",
      "sha256": "44bb375cd827b0538202b019ea337cafe4edd27d6e62d28e5514579426aa73de",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/json-responses/08-privacy-page-state.json"
    },
    {
      "id": "uat-09-non-discrimination-page-state",
      "path": "communications-toolkit/json-responses/09-non-discrimination-page-state.json",
      "name": "09-non-discrimination-page-state.json",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Communications Toolkit",
      "label": "Non-discrimination notice evidence page-state JSON",
      "route": "/legal/non-discrimination",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/non-discrimination",
      "status": 200,
      "controlRefs": [
        "Communications Toolkit"
      ],
      "requirementRefs": [
        "non-discrimination-notice",
        "language-access"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 4989,
      "modifiedIso": "2026-05-16T02:57:30.714Z",
      "sha256": "ea5d236ed3a18d2516737afb9c4be8c824083faf06b526119f4d1e55408edaaf",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/json-responses/09-non-discrimination-page-state.json"
    },
    {
      "id": "uat-10-terms-page-state",
      "path": "communications-toolkit/json-responses/10-terms-page-state.json",
      "name": "10-terms-page-state.json",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Communications Toolkit",
      "label": "Terms and use policy route evidence page-state JSON",
      "route": "/legal/terms",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/terms",
      "status": 404,
      "controlRefs": [
        "Communications Toolkit"
      ],
      "requirementRefs": [
        "terms-of-use",
        "consumer-policy"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 1539,
      "modifiedIso": "2026-05-16T02:57:31.444Z",
      "sha256": "a834296589262ed7a8cf2b012ffde1f64acd03ca0705a63888eaa092f028d074",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/json-responses/10-terms-page-state.json"
    },
    {
      "id": "uat-11-agent-terms-page-state",
      "path": "communications-toolkit/json-responses/11-agent-terms-page-state.json",
      "name": "11-agent-terms-page-state.json",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Communications Toolkit",
      "label": "Agent terms route evidence page-state JSON",
      "route": "/legal/agent-terms",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/agent-terms",
      "status": 200,
      "controlRefs": [
        "Communications Toolkit",
        "Registration and Onboarding"
      ],
      "requirementRefs": [
        "agent-terms",
        "broker-agent-policy"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 5041,
      "modifiedIso": "2026-05-16T02:57:32.313Z",
      "sha256": "06596f19cf7df54e165e16eebc46d95d6827f1c792bb2c1a69739ca1fe7237bc",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/json-responses/11-agent-terms-page-state.json"
    },
    {
      "id": "uat-08-privacy-screenshot",
      "path": "communications-toolkit/screenshots/08-privacy.png",
      "name": "08-privacy.png",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "png",
      "kind": "screenshot",
      "family": "Communications Toolkit",
      "label": "Privacy notice evidence",
      "route": "/legal/privacy",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/privacy",
      "status": 200,
      "controlRefs": [
        "Communications Toolkit",
        "Privacy Controls"
      ],
      "requirementRefs": [
        "privacy-notice",
        "consumer-disclosure"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 710605,
      "modifiedIso": "2026-05-16T02:57:29.904Z",
      "sha256": "d0352245222b05e2eb2d327c08c4e512fcf63d9175b434a9c642e45e4a571951",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/screenshots/08-privacy.png"
    },
    {
      "id": "uat-09-non-discrimination-screenshot",
      "path": "communications-toolkit/screenshots/09-non-discrimination.png",
      "name": "09-non-discrimination.png",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "png",
      "kind": "screenshot",
      "family": "Communications Toolkit",
      "label": "Non-discrimination notice evidence",
      "route": "/legal/non-discrimination",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/non-discrimination",
      "status": 200,
      "controlRefs": [
        "Communications Toolkit"
      ],
      "requirementRefs": [
        "non-discrimination-notice",
        "language-access"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 404219,
      "modifiedIso": "2026-05-16T02:57:30.714Z",
      "sha256": "f518583a74a26d90d6fd86acf9ac94f0ca96553cf04ce4e1f382c3712a2417d9",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/screenshots/09-non-discrimination.png"
    },
    {
      "id": "uat-10-terms-screenshot",
      "path": "communications-toolkit/screenshots/10-terms.png",
      "name": "10-terms.png",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "png",
      "kind": "screenshot",
      "family": "Communications Toolkit",
      "label": "Terms and use policy route evidence",
      "route": "/legal/terms",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/terms",
      "status": 404,
      "controlRefs": [
        "Communications Toolkit"
      ],
      "requirementRefs": [
        "terms-of-use",
        "consumer-policy"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 58328,
      "modifiedIso": "2026-05-16T02:57:31.443Z",
      "sha256": "327a3cfe20ccecaf4faf94a06653822813a99bfaf895307e2d6fe33ab1f6e31a",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/screenshots/10-terms.png"
    },
    {
      "id": "uat-11-agent-terms-screenshot",
      "path": "communications-toolkit/screenshots/11-agent-terms.png",
      "name": "11-agent-terms.png",
      "folder": "communications-toolkit",
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "extension": "png",
      "kind": "screenshot",
      "family": "Communications Toolkit",
      "label": "Agent terms route evidence",
      "route": "/legal/agent-terms",
      "finalUrl": "https://uat-marketlink.healthplan.com/legal/agent-terms",
      "status": 200,
      "controlRefs": [
        "Communications Toolkit",
        "Registration and Onboarding"
      ],
      "requirementRefs": [
        "agent-terms",
        "broker-agent-policy"
      ],
      "evidenceUse": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 588180,
      "modifiedIso": "2026-05-16T02:57:32.313Z",
      "sha256": "57e09bc2e658195938e0944e6c1934bd246e06c7296916c00039de1ff8bc1419",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/screenshots/11-agent-terms.png"
    },
    {
      "id": "uat-04-auth-login-page-state",
      "path": "identity-proofing/json-responses/04-auth-login-page-state.json",
      "name": "04-auth-login-page-state.json",
      "folder": "identity-proofing",
      "moduleId": "identity-proofing",
      "moduleTitle": "Identity Proofing",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Identity Proofing",
      "label": "Authentication entry point and login boundary page-state JSON",
      "route": "/auth/login",
      "finalUrl": "https://uat-marketlink.healthplan.com/auth/login",
      "status": 200,
      "controlRefs": [
        "Identity Proofing",
        "Security Controls"
      ],
      "requirementRefs": [
        "authentication-entry",
        "access-control"
      ],
      "evidenceUse": "RIDP/RBA/GetRecord evidence, identity assurance, fallback and documentation path proof.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 4667,
      "modifiedIso": "2026-05-16T02:57:26.538Z",
      "sha256": "0811e21fbb86d5f0876f19dd94f0498348fb8b4f744e9d39cdd6cb85c225d3fa",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/identity-proofing/json-responses/04-auth-login-page-state.json"
    },
    {
      "id": "uat-05-portal-login-page-state",
      "path": "identity-proofing/json-responses/05-portal-login-page-state.json",
      "name": "05-portal-login-page-state.json",
      "folder": "identity-proofing",
      "moduleId": "identity-proofing",
      "moduleTitle": "Identity Proofing",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Identity Proofing",
      "label": "Portal login route and identity boundary page-state JSON",
      "route": "/portal/login",
      "finalUrl": "https://uat-marketlink.healthplan.com/portal/login",
      "status": 200,
      "controlRefs": [
        "Identity Proofing"
      ],
      "requirementRefs": [
        "portal-login",
        "session-boundary"
      ],
      "evidenceUse": "RIDP/RBA/GetRecord evidence, identity assurance, fallback and documentation path proof.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 3284,
      "modifiedIso": "2026-05-16T02:57:27.374Z",
      "sha256": "e7c1ebde29748286701059e458906eb497e6c47bff66acc0697c71b54ccab97e",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/identity-proofing/json-responses/05-portal-login-page-state.json"
    },
    {
      "id": "uat-04-auth-login-screenshot",
      "path": "identity-proofing/screenshots/04-auth-login.png",
      "name": "04-auth-login.png",
      "folder": "identity-proofing",
      "moduleId": "identity-proofing",
      "moduleTitle": "Identity Proofing",
      "extension": "png",
      "kind": "screenshot",
      "family": "Identity Proofing",
      "label": "Authentication entry point and login boundary",
      "route": "/auth/login",
      "finalUrl": "https://uat-marketlink.healthplan.com/auth/login",
      "status": 200,
      "controlRefs": [
        "Identity Proofing",
        "Security Controls"
      ],
      "requirementRefs": [
        "authentication-entry",
        "access-control"
      ],
      "evidenceUse": "RIDP/RBA/GetRecord evidence, identity assurance, fallback and documentation path proof.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 460843,
      "modifiedIso": "2026-05-16T02:57:26.537Z",
      "sha256": "dd0247080f8f4f2267a11ecfd794483a17fbc1319b792fa1be5503342d26cbb9",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/identity-proofing/screenshots/04-auth-login.png"
    },
    {
      "id": "uat-05-portal-login-screenshot",
      "path": "identity-proofing/screenshots/05-portal-login.png",
      "name": "05-portal-login.png",
      "folder": "identity-proofing",
      "moduleId": "identity-proofing",
      "moduleTitle": "Identity Proofing",
      "extension": "png",
      "kind": "screenshot",
      "family": "Identity Proofing",
      "label": "Portal login route and identity boundary",
      "route": "/portal/login",
      "finalUrl": "https://uat-marketlink.healthplan.com/portal/login",
      "status": 200,
      "controlRefs": [
        "Identity Proofing"
      ],
      "requirementRefs": [
        "portal-login",
        "session-boundary"
      ],
      "evidenceUse": "RIDP/RBA/GetRecord evidence, identity assurance, fallback and documentation path proof.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 92137,
      "modifiedIso": "2026-05-16T02:57:27.374Z",
      "sha256": "ec9c2de79ad816d2b74c64d09d98e2970a6621e84889d118e409d6b88a3abd16",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/identity-proofing/screenshots/05-portal-login.png"
    },
    {
      "id": "uat-06-portal-register-page-state",
      "path": "registration-onboarding/json-responses/06-portal-register-page-state.json",
      "name": "06-portal-register-page-state.json",
      "folder": "registration-onboarding",
      "moduleId": "registration-onboarding",
      "moduleTitle": "Registration and Onboarding",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Registration and Onboarding",
      "label": "Portal registration and onboarding entry point page-state JSON",
      "route": "/portal/register",
      "finalUrl": "https://uat-marketlink.healthplan.com/portal/register",
      "status": 200,
      "controlRefs": [
        "Registration and Onboarding"
      ],
      "requirementRefs": [
        "registration-flow",
        "user-onboarding"
      ],
      "evidenceUse": "Registration, MFA setup, approval gates, and role-specific access controls.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 3709,
      "modifiedIso": "2026-05-16T02:57:28.149Z",
      "sha256": "67a338b5c836e0a8088df129552d10e176b3008032457ec114cc68a3b52bcd6b",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/registration-onboarding/json-responses/06-portal-register-page-state.json"
    },
    {
      "id": "uat-07-request-access-page-state",
      "path": "registration-onboarding/json-responses/07-request-access-page-state.json",
      "name": "07-request-access-page-state.json",
      "folder": "registration-onboarding",
      "moduleId": "registration-onboarding",
      "moduleTitle": "Registration and Onboarding",
      "extension": "json",
      "kind": "page-state-json",
      "family": "Registration and Onboarding",
      "label": "Broker access request and approval gate page-state JSON",
      "route": "/request-access",
      "finalUrl": "https://uat-marketlink.healthplan.com/auth/login?callbackUrl=%2Frequest-access",
      "status": 200,
      "controlRefs": [
        "Registration and Onboarding",
        "Security Controls"
      ],
      "requirementRefs": [
        "approval-gate",
        "role-access-request"
      ],
      "evidenceUse": "Registration, MFA setup, approval gates, and role-specific access controls.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 4707,
      "modifiedIso": "2026-05-16T02:57:29.071Z",
      "sha256": "bedb76111577df7544c55af2d48cd3384108cce12ccb52b86f53f9bed1ea42a9",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/registration-onboarding/json-responses/07-request-access-page-state.json"
    },
    {
      "id": "uat-06-portal-register-screenshot",
      "path": "registration-onboarding/screenshots/06-portal-register.png",
      "name": "06-portal-register.png",
      "folder": "registration-onboarding",
      "moduleId": "registration-onboarding",
      "moduleTitle": "Registration and Onboarding",
      "extension": "png",
      "kind": "screenshot",
      "family": "Registration and Onboarding",
      "label": "Portal registration and onboarding entry point",
      "route": "/portal/register",
      "finalUrl": "https://uat-marketlink.healthplan.com/portal/register",
      "status": 200,
      "controlRefs": [
        "Registration and Onboarding"
      ],
      "requirementRefs": [
        "registration-flow",
        "user-onboarding"
      ],
      "evidenceUse": "Registration, MFA setup, approval gates, and role-specific access controls.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 112663,
      "modifiedIso": "2026-05-16T02:57:28.149Z",
      "sha256": "cb1012b666937693aa6523b22f10e9ca5525b37da2fad33b8cf4d6e8871b1dc7",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/registration-onboarding/screenshots/06-portal-register.png"
    },
    {
      "id": "uat-07-request-access-screenshot",
      "path": "registration-onboarding/screenshots/07-request-access.png",
      "name": "07-request-access.png",
      "folder": "registration-onboarding",
      "moduleId": "registration-onboarding",
      "moduleTitle": "Registration and Onboarding",
      "extension": "png",
      "kind": "screenshot",
      "family": "Registration and Onboarding",
      "label": "Broker access request and approval gate",
      "route": "/request-access",
      "finalUrl": "https://uat-marketlink.healthplan.com/auth/login?callbackUrl=%2Frequest-access",
      "status": 200,
      "controlRefs": [
        "Registration and Onboarding",
        "Security Controls"
      ],
      "requirementRefs": [
        "approval-gate",
        "role-access-request"
      ],
      "evidenceUse": "Registration, MFA setup, approval gates, and role-specific access controls.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 460843,
      "modifiedIso": "2026-05-16T02:57:29.070Z",
      "sha256": "dd0247080f8f4f2267a11ecfd794483a17fbc1319b792fa1be5503342d26cbb9",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/registration-onboarding/screenshots/07-request-access.png"
    },
    {
      "id": "s3p-cms-ede-compliance-requirements-md",
      "path": "s3p-security-privacy/documents/CMS_EDE_COMPLIANCE_REQUIREMENTS.md",
      "name": "CMS_EDE_COMPLIANCE_REQUIREMENTS.md",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "md",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "CMS EDE COMPLIANCE REQUIREMENTS",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 52975,
      "modifiedIso": "2026-05-16T02:57:33.365Z",
      "sha256": "eb3fdb3c39b2f58a7f28c5fa2f6727690f8fb680fd859e3733b1fb02def151f9",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/CMS_EDE_COMPLIANCE_REQUIREMENTS.md"
    },
    {
      "id": "s3p-ede-requirements-coverage-matrix-xlsx",
      "path": "s3p-security-privacy/documents/EDE-Requirements-Coverage-Matrix.xlsx",
      "name": "EDE-Requirements-Coverage-Matrix.xlsx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "xlsx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "EDE Requirements Coverage Matrix",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 25067,
      "modifiedIso": "2026-05-16T02:57:33.379Z",
      "sha256": "972970a1ae77df9ca110d3d96014f3ba5df4ea499f384e7e3bd8dbb6113e1c10",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/EDE-Requirements-Coverage-Matrix.xlsx"
    },
    {
      "id": "s3p-marketlink-arc-ampe-sspp-xlsx",
      "path": "s3p-security-privacy/documents/Marketlink-ARC-AMPE-SSPP.xlsx",
      "name": "Marketlink-ARC-AMPE-SSPP.xlsx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "xlsx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink ARC AMPE SSPP",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 229308,
      "modifiedIso": "2026-05-16T02:57:33.367Z",
      "sha256": "1a51c425002dd49ec5bd32dd58d1de3ec086f70c3f35382ba722d0b7bc14bc0b",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-ARC-AMPE-SSPP.xlsx"
    },
    {
      "id": "s3p-marketlink-cms-ede-gap-analysis-report-docx",
      "path": "s3p-security-privacy/documents/Marketlink-CMS-EDE-Gap-Analysis-Report.docx",
      "name": "Marketlink-CMS-EDE-Gap-Analysis-Report.docx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "docx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink CMS EDE Gap Analysis Report",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 28955,
      "modifiedIso": "2026-05-16T02:57:33.378Z",
      "sha256": "b3451788cc5cf38b0859ea80d738c3aeabf476974cf5d71f93c679782af1ef5f",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-CMS-EDE-Gap-Analysis-Report.docx"
    },
    {
      "id": "s3p-marketlink-cms-isa-docx",
      "path": "s3p-security-privacy/documents/Marketlink-CMS-ISA.docx",
      "name": "Marketlink-CMS-ISA.docx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "docx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink CMS ISA",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 111358,
      "modifiedIso": "2026-05-16T02:57:33.372Z",
      "sha256": "a6a42eb0efd4e225456a9efb660ddd7414b25187847c9c21fe822c7abdc60c2e",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-CMS-ISA.docx"
    },
    {
      "id": "s3p-marketlink-data-retention-policy-docx",
      "path": "s3p-security-privacy/documents/Marketlink-Data-Retention-Policy.docx",
      "name": "Marketlink-Data-Retention-Policy.docx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "docx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink Data Retention Policy",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 15519,
      "modifiedIso": "2026-05-16T02:57:33.377Z",
      "sha256": "2fd6de8b23784d05ba84e4b71ef5e98691fa9e661572e8c56b9808a986bc6058",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-Data-Retention-Policy.docx"
    },
    {
      "id": "s3p-marketlink-disaster-recovery-plan-md",
      "path": "s3p-security-privacy/documents/Marketlink-Disaster-Recovery-Plan.md",
      "name": "Marketlink-Disaster-Recovery-Plan.md",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "md",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink Disaster Recovery Plan",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 8998,
      "modifiedIso": "2026-05-16T02:57:33.376Z",
      "sha256": "59ce8895c314d7e612a167b402bfa3a0f847c03d1a20ee127f0c9ca2ab6e08bf",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-Disaster-Recovery-Plan.md"
    },
    {
      "id": "s3p-marketlink-incident-response-plan-docx",
      "path": "s3p-security-privacy/documents/Marketlink-Incident-Response-Plan.docx",
      "name": "Marketlink-Incident-Response-Plan.docx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "docx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink Incident Response Plan",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 20472,
      "modifiedIso": "2026-05-16T02:57:33.375Z",
      "sha256": "6408b4019c2e9af5239ccbc3b32685b9063f3bab0704f833d7593f68a83272a5",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-Incident-Response-Plan.docx"
    },
    {
      "id": "s3p-marketlink-poam-template-md",
      "path": "s3p-security-privacy/documents/Marketlink-POAM-Template.md",
      "name": "Marketlink-POAM-Template.md",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "md",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink POAM Template",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 5899,
      "modifiedIso": "2026-05-16T02:57:33.373Z",
      "sha256": "1c59b21822429730034578dc19734cf00ae43b974f2c7637ef6b24b52f6c5624",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-POAM-Template.md"
    },
    {
      "id": "s3p-marketlink-privacy-impact-assessment-docx",
      "path": "s3p-security-privacy/documents/Marketlink-Privacy-Impact-Assessment.docx",
      "name": "Marketlink-Privacy-Impact-Assessment.docx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "docx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink Privacy Impact Assessment",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 17775,
      "modifiedIso": "2026-05-16T02:57:33.374Z",
      "sha256": "48ca782169105013d30e4f53273d61e1ca59a04c22c6a6eb55c7c5904149cc86",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-Privacy-Impact-Assessment.docx"
    },
    {
      "id": "s3p-marketlink-sap-official-docx",
      "path": "s3p-security-privacy/documents/Marketlink-SAP-Official.docx",
      "name": "Marketlink-SAP-Official.docx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "docx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink SAP Official",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 152946,
      "modifiedIso": "2026-05-16T02:57:33.371Z",
      "sha256": "bb5d539b658c805c7a0ccf3dad7f4e086d1e372eb2a86814501a00932f8ad732",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-SAP-Official.docx"
    },
    {
      "id": "s3p-marketlink-sspp-de-official-xlsx",
      "path": "s3p-security-privacy/documents/Marketlink-SSPP-DE-Official.xlsx",
      "name": "Marketlink-SSPP-DE-Official.xlsx",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "xlsx",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Marketlink SSPP DE Official",
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "existing-compliance-artifact",
      "sizeBytes": 300246,
      "modifiedIso": "2026-05-16T02:57:33.369Z",
      "sha256": "9ece917f6af316523a2c8dfcaf3cf426c0ec02bd3916b003031ff868f2213a23",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/Marketlink-SSPP-DE-Official.xlsx"
    },
    {
      "id": "s3p-evidence-index-csv",
      "path": "s3p-security-privacy/documents/s3p-evidence-index.csv",
      "name": "s3p-evidence-index.csv",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "csv",
      "kind": "evidence-index",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "S3P evidence index CSV",
      "controlRefs": [
        "S3P",
        "SSPP",
        "SAR",
        "POA&M"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "source-mapped-demonstration-package",
      "sizeBytes": 1779,
      "modifiedIso": "2026-05-16T02:57:33.381Z",
      "sha256": "77b10eb6dda985bf7cc5ab5ec9628e97bd74b668c6293efd1328e85415d339ce",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/s3p-evidence-index.csv"
    },
    {
      "id": "s3p-evidence-index",
      "path": "s3p-security-privacy/documents/s3p-evidence-index.json",
      "name": "s3p-evidence-index.json",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "json",
      "kind": "evidence-index",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "S3P evidence index",
      "controlRefs": [
        "S3P",
        "SSPP",
        "SAR",
        "POA&M"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "source-mapped-demonstration-package",
      "sizeBytes": 3193,
      "modifiedIso": "2026-05-16T02:57:33.381Z",
      "sha256": "3df9006eef25f1bf7173bb5963ef626fbf4fb91d9be14fcdeebe1034580542ce",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/s3p-evidence-index.json"
    },
    {
      "id": "s3p-evidence-requirement-map",
      "path": "s3p-security-privacy/documents/s3p-evidence-requirement-map.md",
      "name": "s3p-evidence-requirement-map.md",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "md",
      "kind": "document",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "S3P / SSPP evidence requirement map",
      "controlRefs": [
        "S3P",
        "SSPP",
        "SAR",
        "POA&M",
        "ARC-AMPE",
        "MARS-E"
      ],
      "requirementRefs": [
        "cms-mars-e-22",
        "cms-arc-ampe-sspp",
        "cms-nee-sar-template",
        "cms-nee-poam-arc-ampe",
        "nist-sp-800-53-r5"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "source-mapped-demonstration-package",
      "sizeBytes": 1446,
      "modifiedIso": "2026-05-16T02:57:33.363Z",
      "sha256": "e8203c0e3c3ada3cd1868e2c8d101e6b44bab788235e3b304ebf64779c81764c",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/documents/s3p-evidence-requirement-map.md"
    },
    {
      "id": "uat-12-trust-page-state",
      "path": "s3p-security-privacy/json-responses/12-trust-page-state.json",
      "name": "12-trust-page-state.json",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "json",
      "kind": "page-state-json",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Trust and security posture page evidence page-state JSON",
      "route": "/trust",
      "finalUrl": "https://uat-marketlink.healthplan.com/trust",
      "status": 200,
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "security-posture",
        "privacy-security-description"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 4724,
      "modifiedIso": "2026-05-16T02:57:33.121Z",
      "sha256": "af7ba4440d4764085d9a96372cf323d221ab984627620a19af74d1fc707318a8",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/json-responses/12-trust-page-state.json"
    },
    {
      "id": "uat-12-trust-screenshot",
      "path": "s3p-security-privacy/screenshots/12-trust.png",
      "name": "12-trust.png",
      "folder": "s3p-security-privacy",
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "extension": "png",
      "kind": "screenshot",
      "family": "S3P / SSPP Security and Privacy Package",
      "label": "Trust and security posture page evidence",
      "route": "/trust",
      "finalUrl": "https://uat-marketlink.healthplan.com/trust",
      "status": 200,
      "controlRefs": [
        "S3P",
        "SSPP",
        "Security Controls"
      ],
      "requirementRefs": [
        "security-posture",
        "privacy-security-description"
      ],
      "evidenceUse": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.",
      "readinessStatus": "current-uat-evidence",
      "sizeBytes": 431164,
      "modifiedIso": "2026-05-16T02:57:33.121Z",
      "sha256": "a3c97f43476d7f91ac7b0eb75cde1c10ba98111c75926ae1dd1941cce89c4d59",
      "publicUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/screenshots/12-trust.png"
    }
  ],
  "caveats": [
    "This packet contains sessionless UAT captures and existing compliance artifacts suitable for presentation and package structure demonstration.",
    "Authenticated CMS EDE transaction evidence, partner test-suite execution, Hub responses, final SAR findings, and auditor signoff require controlled credentials and formal auditor workflow."
  ],
  "fullDownloadUrl": "/docs/marketlink-evidence/packages/marketlink-uat-evidence-full-repository.zip",
  "fullPackage": {
    "fileName": "marketlink-uat-evidence-full-repository.zip",
    "publicUrl": "/docs/marketlink-evidence/packages/marketlink-uat-evidence-full-repository.zip",
    "sizeBytes": 5281764,
    "sha256": "7d917ea1bedda4b29a39d556a4c5434bf598b61d137eadf5e839eb3225bc988e"
  },
  "modulePackages": [
    {
      "moduleId": "application-ui-toolkit",
      "moduleTitle": "Application UI Toolkit",
      "folder": "application-ui-toolkit",
      "fileName": "marketlink-uat-application-ui-toolkit.zip",
      "publicUrl": "/docs/marketlink-evidence/packages/marketlink-uat-application-ui-toolkit.zip",
      "sizeBytes": 1295432,
      "sha256": "5178d6e52d11521a1ddf85b998283c0de87e5f207aeca678fc1a7297b423f627"
    },
    {
      "moduleId": "identity-proofing",
      "moduleTitle": "Identity Proofing",
      "folder": "identity-proofing",
      "fileName": "marketlink-uat-identity-proofing.zip",
      "publicUrl": "/docs/marketlink-evidence/packages/marketlink-uat-identity-proofing.zip",
      "sizeBytes": 523840,
      "sha256": "fcf9d82a7be659445ad482ca679a763f91da465068ade3e7df600e65a682b9ea"
    },
    {
      "moduleId": "registration-onboarding",
      "moduleTitle": "Registration and Onboarding",
      "folder": "registration-onboarding",
      "fileName": "marketlink-uat-registration-onboarding.zip",
      "publicUrl": "/docs/marketlink-evidence/packages/marketlink-uat-registration-onboarding.zip",
      "sizeBytes": 545367,
      "sha256": "c32bf18f0ffe20e989734e1c0f989cf7b642855df9208ff3bfb18b30c53d3a1a"
    },
    {
      "moduleId": "communications-toolkit",
      "moduleTitle": "Communications Toolkit",
      "folder": "communications-toolkit",
      "fileName": "marketlink-uat-communications-toolkit.zip",
      "publicUrl": "/docs/marketlink-evidence/packages/marketlink-uat-communications-toolkit.zip",
      "sizeBytes": 1656361,
      "sha256": "b195c759b62d807476b30f7f12acbb0986234ba40118bade6e991039a53c457a"
    },
    {
      "moduleId": "api-functional-integration-toolkit",
      "moduleTitle": "API Functional Integration Toolkit",
      "folder": "api-functional-integration-toolkit",
      "fileName": "marketlink-uat-api-functional-integration-toolkit.zip",
      "publicUrl": "/docs/marketlink-evidence/packages/marketlink-uat-api-functional-integration-toolkit.zip",
      "sizeBytes": 2334,
      "sha256": "bec9d9b388152ded122d3ff9271799b1988be5669faa101b22d31ab36b2dae4d"
    },
    {
      "moduleId": "s3p-security-privacy",
      "moduleTitle": "S3P / SSPP Security and Privacy Package",
      "folder": "s3p-security-privacy",
      "fileName": "marketlink-uat-s3p-security-privacy.zip",
      "publicUrl": "/docs/marketlink-evidence/packages/marketlink-uat-s3p-security-privacy.zip",
      "sizeBytes": 1250225,
      "sha256": "b374341ce340065aadf4e372fec84c149d3069f3171494b10266ab917eaf345d"
    }
  ]
}