{
  "title": "OSINT source-reliability reference matrix",
  "version": "2026-10-03",
  "language": "fr-en",
  "scale": {
    "1": {
      "fr": "faible ou inconnu",
      "en": "low or unknown"
    },
    "2": {
      "fr": "limité",
      "en": "limited"
    },
    "3": {
      "fr": "utile avec contexte",
      "en": "useful with context"
    },
    "4": {
      "fr": "fort dans son périmètre",
      "en": "strong within scope"
    }
  },
  "notice": {
    "fr": "Les scores décrivent des propriétés habituelles d’un type de source, pas la fiabilité automatique de chaque document. L’origine, la date, le périmètre et la corroboration restent indispensables.",
    "en": "Scores describe typical properties of a source type, not the automatic reliability of every document. Origin, date, scope and corroboration remain essential."
  },
  "sources": [
    {
      "id": "official-register",
      "category": "institutional",
      "label": {
        "fr": "Registre officiel",
        "en": "Official register"
      },
      "provenance": 4,
      "independence": 4,
      "freshness": 3,
      "evidence": 4,
      "volatility": "low",
      "use": {
        "fr": "Existence, statut, dirigeants ou dépôts dans le périmètre du registre.",
        "en": "Existence, status, officers or filings within the register’s scope."
      },
      "caution": {
        "fr": "Un registre reflète ses règles, sa date et les déclarations reçues ; il ne prouve pas toutes les activités réelles.",
        "en": "A register reflects its rules, date and submitted information; it does not prove every real-world activity."
      }
    },
    {
      "id": "court-decision",
      "category": "institutional",
      "label": {
        "fr": "Décision de justice publiée",
        "en": "Published court decision"
      },
      "provenance": 4,
      "independence": 4,
      "freshness": 3,
      "evidence": 4,
      "volatility": "low",
      "use": {
        "fr": "Établir une décision, une procédure et son issue publiée.",
        "en": "Establish a decision, proceeding and published outcome."
      },
      "caution": {
        "fr": "Vérifier juridiction, date, voies de recours, anonymisation et portée exacte.",
        "en": "Check jurisdiction, date, appeal status, anonymisation and exact scope."
      }
    },
    {
      "id": "public-authority-release",
      "category": "institutional",
      "label": {
        "fr": "Publication d’une autorité publique",
        "en": "Public-authority publication"
      },
      "provenance": 4,
      "independence": 3,
      "freshness": 4,
      "evidence": 4,
      "volatility": "low",
      "use": {
        "fr": "Position officielle, alerte, statistique ou instruction dans un champ défini.",
        "en": "Official position, alert, statistic or instruction within a defined field."
      },
      "caution": {
        "fr": "Distinguer donnée observée, communication institutionnelle et recommandation.",
        "en": "Separate observed data, institutional communication and recommendation."
      }
    },
    {
      "id": "company-filing",
      "category": "first-party",
      "label": {
        "fr": "Dépôt ou rapport d’entreprise",
        "en": "Company filing or report"
      },
      "provenance": 4,
      "independence": 2,
      "freshness": 3,
      "evidence": 3,
      "volatility": "low",
      "use": {
        "fr": "Déclarations, comptes, gouvernance et événements publiés par l’entité.",
        "en": "Statements, accounts, governance and events published by the entity."
      },
      "caution": {
        "fr": "Source primaire sur la déclaration, mais intéressée quant à son interprétation.",
        "en": "Primary evidence of the statement, but interested in its interpretation."
      }
    },
    {
      "id": "official-website",
      "category": "first-party",
      "label": {
        "fr": "Site ou compte officiel",
        "en": "Official site or account"
      },
      "provenance": 3,
      "independence": 2,
      "freshness": 4,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Canaux déclarés, offres, prises de position et informations opérationnelles.",
        "en": "Declared channels, offers, positions and operational information."
      },
      "caution": {
        "fr": "Vérifier l’authenticité du domaine ou du compte et conserver la version datée.",
        "en": "Verify the domain or account and preserve the dated version."
      }
    },
    {
      "id": "original-document",
      "category": "first-party",
      "label": {
        "fr": "Document original identifiable",
        "en": "Identifiable original document"
      },
      "provenance": 4,
      "independence": 2,
      "freshness": 3,
      "evidence": 4,
      "volatility": "low",
      "use": {
        "fr": "Prouver le contenu d’une déclaration ou d’un acte à un instant donné.",
        "en": "Establish the content of a statement or act at a given time."
      },
      "caution": {
        "fr": "Authentifier l’émetteur, l’intégrité, la version et le contexte de production.",
        "en": "Authenticate issuer, integrity, version and production context."
      }
    },
    {
      "id": "reputable-media",
      "category": "editorial",
      "label": {
        "fr": "Média identifiable avec processus éditorial",
        "en": "Identifiable media with editorial process"
      },
      "provenance": 3,
      "independence": 3,
      "freshness": 4,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Contexte, témoignages, chronologie et enquête attribuée.",
        "en": "Context, attributed testimony, chronology and reporting."
      },
      "caution": {
        "fr": "Revenir aux sources citées et distinguer reportage, tribune, dépêche et correction.",
        "en": "Return to cited sources and distinguish reporting, opinion, wire copy and correction."
      }
    },
    {
      "id": "specialist-publication",
      "category": "editorial",
      "label": {
        "fr": "Publication spécialisée",
        "en": "Specialist publication"
      },
      "provenance": 3,
      "independence": 3,
      "freshness": 3,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Contexte technique ou sectoriel et interprétation experte.",
        "en": "Technical or sector context and expert interpretation."
      },
      "caution": {
        "fr": "Vérifier compétence, méthode, financement et proximité avec le sujet.",
        "en": "Check expertise, method, funding and proximity to the subject."
      }
    },
    {
      "id": "academic-paper",
      "category": "research",
      "label": {
        "fr": "Article scientifique ou étude méthodée",
        "en": "Scientific paper or methodical study"
      },
      "provenance": 4,
      "independence": 3,
      "freshness": 2,
      "evidence": 4,
      "volatility": "low",
      "use": {
        "fr": "Méthode, limites, résultats et état des connaissances sur une question définie.",
        "en": "Method, limitations, findings and state of knowledge for a defined question."
      },
      "caution": {
        "fr": "Contrôler relecture, échantillon, réplication, date et adéquation au cas étudié.",
        "en": "Check review status, sample, replication, date and fit to the case."
      }
    },
    {
      "id": "web-archive",
      "category": "archive",
      "label": {
        "fr": "Archive du web",
        "en": "Web archive"
      },
      "provenance": 3,
      "independence": 4,
      "freshness": 2,
      "evidence": 3,
      "volatility": "low",
      "use": {
        "fr": "Montrer qu’une page ou version était archivée à une date donnée.",
        "en": "Show that a page or version was archived at a given date."
      },
      "caution": {
        "fr": "L’archive peut être partielle et ne prouve pas l’auteur, l’intention ou toutes les ressources chargées.",
        "en": "An archive may be incomplete and does not prove author, intent or every loaded resource."
      }
    },
    {
      "id": "domain-certificate-history",
      "category": "technical",
      "label": {
        "fr": "Historique de domaine ou certificat",
        "en": "Domain or certificate history"
      },
      "provenance": 3,
      "independence": 4,
      "freshness": 4,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Dates, relations techniques et changements visibles d’une infrastructure publique.",
        "en": "Dates, technical relationships and visible changes in public infrastructure."
      },
      "caution": {
        "fr": "Une relation technique ne prouve ni propriété commune ni intention commune.",
        "en": "A technical relationship proves neither common ownership nor common intent."
      }
    },
    {
      "id": "dataset-api",
      "category": "technical",
      "label": {
        "fr": "Jeu de données ou API documentée",
        "en": "Documented dataset or API"
      },
      "provenance": 4,
      "independence": 3,
      "freshness": 4,
      "evidence": 4,
      "volatility": "medium",
      "use": {
        "fr": "Comparer des observations structurées avec méthode, date et variables explicites.",
        "en": "Compare structured observations with explicit method, date and variables."
      },
      "caution": {
        "fr": "Contrôler définitions, couverture, ruptures de série, licence et valeurs manquantes.",
        "en": "Check definitions, coverage, series breaks, licence and missing values."
      }
    },
    {
      "id": "direct-witness",
      "category": "human",
      "label": {
        "fr": "Témoignage direct attribué",
        "en": "Attributed direct witness"
      },
      "provenance": 3,
      "independence": 3,
      "freshness": 4,
      "evidence": 2,
      "volatility": "medium",
      "use": {
        "fr": "Comprendre une observation vécue et orienter les vérifications.",
        "en": "Understand a lived observation and guide verification."
      },
      "caution": {
        "fr": "La mémoire, la perception et l’intérêt du témoin nécessitent recoupement et contexte.",
        "en": "Memory, perception and witness interest require corroboration and context."
      }
    },
    {
      "id": "social-post",
      "category": "social",
      "label": {
        "fr": "Publication sociale attribuée",
        "en": "Attributed social post"
      },
      "provenance": 2,
      "independence": 2,
      "freshness": 4,
      "evidence": 2,
      "volatility": "high",
      "use": {
        "fr": "Établir qu’un compte a publié un contenu visible à un instant donné.",
        "en": "Establish that an account displayed content at a given time."
      },
      "caution": {
        "fr": "L’identité, l’auteur réel, le contexte et l’intégrité du compte peuvent rester incertains.",
        "en": "Identity, actual author, context and account integrity may remain uncertain."
      }
    },
    {
      "id": "anonymous-claim",
      "category": "social",
      "label": {
        "fr": "Affirmation anonyme non sourcée",
        "en": "Unsourced anonymous claim"
      },
      "provenance": 1,
      "independence": 1,
      "freshness": 3,
      "evidence": 1,
      "volatility": "high",
      "use": {
        "fr": "Repérer une piste ou un récit à vérifier, sans l’utiliser comme conclusion.",
        "en": "Identify a lead or narrative to verify, not a conclusion."
      },
      "caution": {
        "fr": "Ne pas attribuer, republier ou transformer en fait sans source indépendante.",
        "en": "Do not attribute, republish or treat as fact without independent sourcing."
      }
    },
    {
      "id": "automated-detector",
      "category": "tool",
      "label": {
        "fr": "Score d’un détecteur automatisé",
        "en": "Automated detector score"
      },
      "provenance": 2,
      "independence": 2,
      "freshness": 3,
      "evidence": 1,
      "volatility": "high",
      "use": {
        "fr": "Orienter une analyse lorsque le modèle, la version et le domaine de validité sont connus.",
        "en": "Guide analysis when model, version and validity domain are known."
      },
      "caution": {
        "fr": "Un score isolé ne prouve ni authenticité, ni manipulation, ni origine.",
        "en": "A score alone proves neither authenticity, manipulation nor origin."
      }
    },
    {
      "id": "procurement-notice",
      "category": "institutional",
      "label": {
        "fr": "Avis de marché public",
        "en": "Public procurement notice"
      },
      "provenance": 4,
      "independence": 4,
      "freshness": 3,
      "evidence": 4,
      "volatility": "medium",
      "use": {
        "fr": "Objet, acheteur, calendrier et titulaire publiés dans la procédure.",
        "en": "Published subject, buyer, timetable and award within a procedure."
      },
      "caution": {
        "fr": "Un avis ne prouve pas l’exécution effective ni le résultat du contrat.",
        "en": "A notice does not prove delivery or outcome of the contract."
      }
    },
    {
      "id": "regulator-decision",
      "category": "institutional",
      "label": {
        "fr": "Décision d’un régulateur",
        "en": "Regulator decision"
      },
      "provenance": 4,
      "independence": 4,
      "freshness": 3,
      "evidence": 4,
      "volatility": "low",
      "use": {
        "fr": "Mesure ou constat publié par une autorité dans sa compétence.",
        "en": "Published finding or measure by an authority within its remit."
      },
      "caution": {
        "fr": "Vérifier la date, le recours, la portée et les éventuelles corrections.",
        "en": "Check date, appeal status, scope and later corrections."
      }
    },
    {
      "id": "public-code-repository",
      "category": "technical",
      "label": {
        "fr": "Dépôt de code public",
        "en": "Public code repository"
      },
      "provenance": 3,
      "independence": 2,
      "freshness": 4,
      "evidence": 3,
      "volatility": "high",
      "use": {
        "fr": "Historique de fichiers, versions et déclarations associées à un projet.",
        "en": "History of files, versions and claims associated with a project."
      },
      "caution": {
        "fr": "Un compte ou dépôt public peut être copié, abandonné ou attribué à tort.",
        "en": "A public account or repository can be copied, abandoned or misattributed."
      }
    },
    {
      "id": "package-registry",
      "category": "technical",
      "label": {
        "fr": "Registre de paquets logiciels",
        "en": "Software package registry"
      },
      "provenance": 3,
      "independence": 2,
      "freshness": 4,
      "evidence": 3,
      "volatility": "high",
      "use": {
        "fr": "Versions, mainteneurs déclarés et dépendances publiés pour un paquet.",
        "en": "Published versions, declared maintainers and dependencies for a package."
      },
      "caution": {
        "fr": "Le nom du mainteneur ne suffit pas à établir son identité réelle.",
        "en": "A maintainer name alone does not establish real identity."
      }
    },
    {
      "id": "certificate-transparency",
      "category": "technical",
      "label": {
        "fr": "Journal de transparence des certificats",
        "en": "Certificate transparency log"
      },
      "provenance": 4,
      "independence": 3,
      "freshness": 4,
      "evidence": 3,
      "volatility": "high",
      "use": {
        "fr": "Émission datée d’un certificat et noms couverts à cet instant.",
        "en": "Dated certificate issuance and names covered at that time."
      },
      "caution": {
        "fr": "Un certificat n’établit ni la propriété actuelle ni l’existence d’un service actif.",
        "en": "A certificate proves neither current ownership nor an active service."
      }
    },
    {
      "id": "passive-dns-history",
      "category": "technical",
      "label": {
        "fr": "Historique DNS passif",
        "en": "Passive DNS history"
      },
      "provenance": 3,
      "independence": 2,
      "freshness": 3,
      "evidence": 3,
      "volatility": "high",
      "use": {
        "fr": "Relations observées entre domaine, sous-domaine et adresse au fil du temps.",
        "en": "Observed domain, subdomain and address relationships over time."
      },
      "caution": {
        "fr": "La couverture varie selon le collecteur ; une adresse partagée peut créer de faux liens.",
        "en": "Coverage varies by collector; shared addresses can create false links."
      }
    },
    {
      "id": "syndicated-article",
      "category": "editorial",
      "label": {
        "fr": "Article repris par syndication",
        "en": "Syndicated article"
      },
      "provenance": 3,
      "independence": 1,
      "freshness": 3,
      "evidence": 2,
      "volatility": "medium",
      "use": {
        "fr": "Diffusion et formulation d’un récit repris par plusieurs médias.",
        "en": "Distribution and wording of a story carried by several outlets."
      },
      "caution": {
        "fr": "Des reprises identiques ne sont pas des confirmations indépendantes.",
        "en": "Identical republications are not independent corroboration."
      }
    },
    {
      "id": "platform-transparency-report",
      "category": "research",
      "label": {
        "fr": "Rapport de transparence d’une plateforme",
        "en": "Platform transparency report"
      },
      "provenance": 3,
      "independence": 2,
      "freshness": 3,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Mesures déclarées par une plateforme selon sa méthode et sa période.",
        "en": "Measures reported by a platform under its own method and period."
      },
      "caution": {
        "fr": "Les catégories, dénominateurs et incitations de l’éditeur doivent être examinés.",
        "en": "Examine the publisher’s categories, denominators and incentives."
      }
    },
    {
      "id": "security-advisory",
      "category": "institutional",
      "label": {
        "fr": "Avis de sécurité d’un éditeur ou organisme",
        "en": "Vendor or authority security advisory"
      },
      "provenance": 4,
      "independence": 3,
      "freshness": 3,
      "evidence": 4,
      "volatility": "medium",
      "use": {
        "fr": "Produit, versions touchées, mesures et date d’un avis publié.",
        "en": "Product, affected versions, mitigations and publication date in a notice."
      },
      "caution": {
        "fr": "Un avis décrit le périmètre connu de son émetteur ; il ne prouve pas qu’un actif précis soit exposé.",
        "en": "A notice reflects its publisher’s known scope; it does not prove a particular asset is exposed."
      }
    },
    {
      "id": "breach-notification",
      "category": "institutional",
      "label": {
        "fr": "Notification officielle de violation",
        "en": "Official breach notification"
      },
      "provenance": 4,
      "independence": 3,
      "freshness": 3,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Faits, catégories de données et période communiqués par l’organisme responsable.",
        "en": "Facts, data categories and period reported by the responsible organisation."
      },
      "caution": {
        "fr": "La notification initiale peut être révisée à mesure que l’enquête progresse.",
        "en": "An initial notice may be revised as investigation continues."
      }
    },
    {
      "id": "ad-library",
      "category": "research",
      "label": {
        "fr": "Bibliothèque publique de publicités",
        "en": "Public ad library"
      },
      "provenance": 3,
      "independence": 2,
      "freshness": 3,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Création, dates et annonceur affichés selon la transparence offerte par la plateforme.",
        "en": "Creative, dates and displayed advertiser within a platform’s transparency scope."
      },
      "caution": {
        "fr": "La bibliothèque peut être incomplète et l’annonceur affiché ne prouve pas l’accord d’une marque.",
        "en": "The library may be incomplete and a displayed advertiser does not prove brand approval."
      }
    },
    {
      "id": "email-headers",
      "category": "technical",
      "label": {
        "fr": "En-têtes d’un courriel original",
        "en": "Original email headers"
      },
      "provenance": 3,
      "independence": 3,
      "freshness": 4,
      "evidence": 3,
      "volatility": "low",
      "use": {
        "fr": "Chemin technique et résultats d’authentification du message conservé.",
        "en": "Technical route and authentication results of a preserved message."
      },
      "caution": {
        "fr": "Une authentification réussie d’un domaine ne prouve pas que la demande soit légitime.",
        "en": "Successful domain authentication does not prove the request itself is legitimate."
      }
    },
    {
      "id": "live-dns-answer",
      "category": "technical",
      "label": {
        "fr": "Réponse DNS observée",
        "en": "Observed live DNS answer"
      },
      "provenance": 3,
      "independence": 2,
      "freshness": 4,
      "evidence": 2,
      "volatility": "high",
      "use": {
        "fr": "Adresse ou service annoncé publiquement à une heure de consultation donnée.",
        "en": "Publicly advertised address or service at a recorded observation time."
      },
      "caution": {
        "fr": "Une réponse actuelle ne décrit pas nécessairement la configuration passée ni le propriétaire réel.",
        "en": "A current answer need not describe a past configuration or actual ownership."
      }
    },
    {
      "id": "original-media-file",
      "category": "technical",
      "label": {
        "fr": "Fichier média d’origine conservé",
        "en": "Preserved original media file"
      },
      "provenance": 3,
      "independence": 3,
      "freshness": 3,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Contenu, format et métadonnées d’un fichier reçu avant transformation connue.",
        "en": "Content, format and metadata of a file received before known transformation."
      },
      "caution": {
        "fr": "Les métadonnées peuvent manquer ou être modifiées ; elles ne prouvent pas à elles seules l’auteur.",
        "en": "Metadata may be absent or altered and does not establish authorship on its own."
      }
    },
    {
      "id": "platform-review",
      "category": "social",
      "label": {
        "fr": "Avis publié sur une plateforme",
        "en": "Platform review"
      },
      "provenance": 2,
      "independence": 2,
      "freshness": 4,
      "evidence": 2,
      "volatility": "high",
      "use": {
        "fr": "Expérience ou opinion attribuée à un compte dans un contexte de service donné.",
        "en": "Experience or opinion attributed to an account in a given service context."
      },
      "caution": {
        "fr": "Un avis n’établit pas seul une transaction réelle, une identité ou une campagne coordonnée.",
        "en": "One review alone does not establish a real transaction, identity or coordinated campaign."
      }
    },
    {
      "id": "fact-check-article",
      "category": "editorial",
      "label": {
        "fr": "Article de vérification factuelle",
        "en": "Fact-checking article"
      },
      "provenance": 3,
      "independence": 3,
      "freshness": 3,
      "evidence": 3,
      "volatility": "medium",
      "use": {
        "fr": "Méthode, sources et raisonnement publiés pour une affirmation précise.",
        "en": "Published method, sources and reasoning for a specific claim."
      },
      "caution": {
        "fr": "La conclusion dépend du libellé contrôlé, des sources disponibles et de la date de publication.",
        "en": "The conclusion depends on the exact claim tested, available sources and publication date."
      }
    }
  ],
  "provenance": {
    "fr": "Référentiel éditorial IIS, non statistique. Les recommandations et scores sont des repères à adapter au dossier, pas des mesures validées scientifiquement.",
    "en": "IIS editorial reference, not a statistical dataset. Recommendations and scores are case-dependent reference points, not scientifically validated measurements."
  },
  "references": [
    "https://www.cert.ssi.gouv.fr/",
    "https://www.cnil.fr/fr/violations-de-donnees-personnelles-les-regles-suivre",
    "https://www.icann.org/en/announcements/details/icann-update-launching-rdap-sunsetting-whois-27-01-2025-en"
  ]
}