# Official sources

Use this reference only when you need source grounding for GCP landing zone behavior or the detailed source list.

## GCP documentation

Use these as starting points, not as proof of the user's live GCP state:
- https://cloud.google.com/architecture/security-foundations
- https://cloud.google.com/resource-manager/docs/organization-policy/overview
- https://cloud.google.com/vpc/docs/shared-vpc
- https://cloud.google.com/logging/docs/audit/configure-data-access

## Grounding rule

Official documentation explains GCP landing zone patterns and org policy behavior. It does not prove the user's current folder structure, policy bindings, audit log configuration, SCC tier, or billing setup. Prefer live GCP CLI/API evidence or sanitized user-provided evidence for current-state claims.
