# Official sources

Use this reference only when you need source grounding for GCP compliance service behavior or the detailed source list.

## Google Cloud documentation

Use these as starting points, not as proof of the user's live GCP state:
- https://cloud.google.com/assured-workloads/docs/overview
- https://cloud.google.com/security/compliance/offerings
- https://cloud.google.com/security-command-center/docs/compliance-dashboard
- https://cloud.google.com/assured-workloads/docs/supported-products
- https://cloud.google.com/security-command-center/docs/how-to-use-security-command-center
- https://cloud.google.com/asset-inventory/docs/overview
- https://cloud.google.com/logging/docs/audit
- https://cloud.google.com/assured-workloads/docs/data-residency

## Grounding rule

Official documentation explains GCP Assured Workloads and compliance service behavior. It does not prove the user's current compliance posture, authorized service usage, audit log configuration, or SCC finding state. Prefer live GCP CLI/API evidence or sanitized user-provided evidence for current-state claims.
