An anti-cherry-pick cohort still fails with an incomplete denominator.
Internal commercialization control. DN sits before DM. A self-described authoritative register is not enough for a serviceability cohort.
First supported proof
Within one bounded provider/process/form family and completed-event period, reconcile the authoritative register at event-level identity to a separate event source expected to contain the same event universe. A count-only match is insufficient.
Any unexplained source-only event blocks cohort admission. Matching sources do not prove absolute completeness; they prove only bounded denominator consistency under the declared scope.
Data boundary
The reconciliation may run in a buyer-controlled environment and persist hashes, counts and variance states rather than source documents or raw event IDs.
This is not an audit, assurance engagement, attestation or statistical sample.