Scoring policy governance

Rules

1. Each published campaign references an immutable scoring_policy_version.
2. Relationship weights, rounding, Not Observed handling, and suppression thresholds are versioned — not user-editable on the participant report.
3. Official result cannot be altered by the subject changing weights in the UI.
4. Scenario analysis (if retained) is labeled non-official and requires manage_surveys or methodology role.
5. Verification and raw diagnostics belong on methodology/support surfaces, not participant PDP tools.

Implementation status

• Weight override controls remain in subject UI — migrate to gated methodology view (14A follow-up).
• POST /api/surveys/{id}/metrics/recompute — restrict to authorized roles in next tranche.

Report rendering

• Prefer native accessible components over iframe.srcdoc.
• Any iframe: sandbox, CSP, sanitization, print and screen-reader tests required.