Partial Evaluation

PCIComplianceHubLast updated

An evaluation of a payment page that ran and returned results but did not see the whole page: some script bodies were unreadable, a frame could not be inspected, or requests were blocked. The distinction governs what the result can be read to mean. A partial evaluation supports the claim that the mechanism was performed in the period, because it ran and its headers are trustworthy, but not the claim that nothing changed, because its comparison covers only what it saw. Reporting the two facts separately stops a scan that read almost nothing from being recorded as a clean page.