The signal ledger.
These facts move the question beyond a label and into a product, money-flow and control analysis.
Bring a compact evidence docket—not a pitch deck.
Give a compliance team or counsel the operating facts that reveal the perimeter.
Questions people ask before they build.
Short answers for orientation. The right result can change with the service model and current rules.
Is a pure commercial supplier automatically outside NSR?
No. Privileged access, dual-use capability, or operational influence can still require screening.
Do we need both NSR and SAMR?
Possibly. They are separate regimes — design for the longer clock.
Primary authorities
Reviewed sources support orientation, not a fact-specific assessment.
Sources last checked:




