Declared versus actual: what a published profile claims, against what the probe could actually reach under it. A different comparison from the baseline-normalised matrix — no drift class is a capability category, and nothing here moves the 0–8 exposure count.
The security-relevant direction: the sandbox is looser than its published claim. Kept apart from the declared-side verdicts, never pooled with them.
One drift class per declared unit. match = delivered; overclaim = declared, unreachable, and the baseline could reach it; unprovable = nothing was there to reach; unattested = nothing here observes it.
Reported, never as gaps: an unenforced surface is not a policy failure.