| FORK-001 · Repository Naming | 0.1.0 | Ratified |
| FORK-002 · Patch Branches | 0.1.0 | Ratified |
| FORK-003 · Baseline Tags | 0.1.0 | Ratified |
| FORK-004 · Open Source Patch Publication | 0.0.1 | Pre-Draft |
| SRC-001 · Patch Basis Classification | 0.0.1 | Pre-Draft |
| SRC-002 · Upstream Provenance Links | 0.1.0 | Ratified |
| SRC-003 · License Headers for New Files | 0.1.0 | Ratified |
| REL-001 · Provider Test Provenance | 0.2.0 | Draft |
| REL-002 · Bytecode Compatibility | 0.1.0 | Ratified |
| REL-003 · Patch Version Naming | 0.1.0 | Ratified |
| REL-003-JAVA · Java Patch Version Naming | 0.1.0 | Ratified |
| REL-003-JAVASCRIPT · JavaScript Patch Version Naming | 0.1.1 | Draft |
| REL-004 · Approved Producers | 0.1.0 | Ratified |
| REL-005 · Artifact Publication Hygiene | 0.2.1 | Draft |
| REL-005-JAVA · JVM Artifact Publication | 0.1.0 | Draft |
| REL-005-JAVASCRIPT · JavaScript Package Publication | 0.0.1 | Pre-Draft |
| REL-006 · Patch Request Authorization | 0.0.1 | Pre-Draft |
| REL-007 · Build Provenance and Signed Attestation | 0.0.1 | Pre-Draft |
| REL-008 · Build Security Scanning | 0.0.1 | Pre-Draft |
| REL-009 · Coordinated Remediation Adoption | 0.1.1 | Draft |
| REL-009-JAVA · Java Line Release and BOM Propagation | 0.1.0 | Draft |
| REL-009-JAVASCRIPT · JavaScript Coordinated Remediation Adoption | 0.0.1 | Pre-Draft |
| FEED-001 · OpenVEX and CycloneDX Feeds | 0.1.0 | Ratified |
| FEED-002 · Artifact CycloneDX Document | 0.1.0 | Draft |
| EVD-001 · Change and Test Surface Guidance | 0.0.1 | Pre-Draft |
| APP-001 · Estate-Wide Patch Application | 0.0.1 | Pre-Draft |
| STD-001 · Standards-as-Code Source Metadata | 0.1.0 | Ratified |