Three signals. Never collapsed into one.
Every public resource carries three orthogonal signals. They are displayed as independent badges. They are never combined into a single tier number - that conflation is the most common failure mode of public registries.
Provider verification
Question it answers: is this provider really who they say they are?
Values: UNVERIFIED · VERIFIED · OFFICIAL_PROVIDER.
Provider verification confirms identity. It does not certify every resource the provider submits.
Sovereignty review
Question it answers: does this resource actually encode something locally relevant?
Values: NOT_REVIEWED · PENDING · PASSED · FAILED · NOT_REQUIRED.
Reviewers apply the published sovereignty rubric and record their reasoning. Decisions are public.
Official-resource status
Question it answers: has the official provider explicitly authorised this resource?
Values: NONE · PENDING · ENDORSED · REVOKED.
Official-resource status is a stronger endorsement: it requires explicit authorisation by the official provider, not merely provider verification.
Why three
Collapsing these into a single tier number turns the registry into a de-facto certifier and attracts liability that was never intended. Three independent signals keep responsibility where it belongs: the provider operates and remains liable; the registry exposes lightweight signals so users can tell "this resource exists" from "an authorised body has officially endorsed this resource."