The Proof Obligation

What Federal Pass-Through Funding Actually Requires

Every year, billions of dollars in federal funds flow through state and local governments and into nonprofit organizations as grants. The organizations that receive them — housing agencies, workforce development nonprofits, community health clinics, service providers of every kind — understand themselves to be compliant. They have policies. They have financial systems. They file their reports on time.

What most of them do not have is proof.

This distinction between being compliant and being able to demonstrate compliance is the central risk management gap in the federal subrecipient universe. It is not a gap born of bad intent. It is born of a systematic misunderstanding of what the Uniform Guidance actually requires.

What the Uniform Guidance Says

2 CFR Part 200, the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (the Uniform Guidance), governs the expenditure of federal funds by pass-through recipients and subrecipients. Its requirements are well known in their broad strokes: allowability, allocability, reasonableness. Documentation of costs. Procurement standards. Internal controls.

What is less commonly understood is that these requirements do not operate on a filing schedule. The Uniform Guidance does not ask organizations to assemble evidence at year-end and submit it for review. It creates an ongoing obligation to maintain records sufficient to demonstrate compliance on demand at any point during or after the period of performance.

Section 200.334 requires records retention for a minimum of three years from the date of submission of the final expenditure report, or longer in circumstances involving litigation, claims, or audit findings. Section 200.302 requires that financial management systems provide accurate, current, and complete disclosure of financial results for each federally-sponsored project or program. Section 200.303 requires that internal controls be sufficient to ensure that federal awards are managed in compliance with applicable laws, regulations, and the terms and conditions of the award.

None of these sections say: be ready at audit time. They say: be ready.

The Gap That Creates Exposure

The practical consequence of this misreading is an evidence gap. Organizations build compliance programs oriented around filing deadlines and audit cycles. They document as they go but not in a governed, queryable way. Files accumulate in shared drives. Approvals exist in email chains. Procurement decisions are recorded in systems that were not designed to produce a reconstructed decision record under pressure.

This architecture is adequate for routine operations. It is not adequate for scrutiny.

Scrutiny does not announce itself on a schedule. It arrives in the form of a monitoring visit from a pass-through entity. A federal Office of Inspector General inquiry. A single audit finding that triggers a follow-on review. A board member who asks a question at the wrong moment. A creditor who requests documentation as a condition of a draw.

In each of these cases, the organization is asked to produce evidence, not to file paperwork. The question is not "are you compliant?" The question is "can you prove it?"

The answer, for most organizations, involves a scramble. Staff pull records from multiple systems. Someone reconstructs an approval chain from email. A consultant is retained to help organize the response. The organization may ultimately demonstrate compliance but the process of doing so consumes resources, introduces risk, and leaves the record with gaps that become findings, or findings that become corrective action plans.

This is not a compliance failure. It is a proof failure. And the distinction matters.

What a Proof Obligation Requires

Meeting a proof obligation is structurally different from meeting a compliance obligation. Compliance asks: did you follow the rules? Proof asks: can you demonstrate, to an external party under adversarial conditions, that you followed the rules?

The difference is not philosophical. It is operational.

An organization that meets its proof obligation has a governed record of every significant claim it could be asked to defend expenditures, procurement decisions, eligibility determinations, service delivery, matching contributions. Not a filing system.

A claims register. It has evidence that is linked to claims at the point of occurrence, not reconstructed after the fact, with supporting documentation that does not require interpretation to understand. It has a defined process for responding to a scrutiny event who answers, what they produce, in what timeframe. Not a crisis response protocol. A standing readiness posture.

The test is concrete: the ability to answer a specific question about a specific transaction in under twenty minutes, without the involvement of legal counsel or a forensic accountant.

Most organizations cannot do this. Not because their expenditures are improper. Because their evidence architecture was not designed to answer questions only to support filings.

The Cost of the Gap

The cost of an evidence gap is not incurred when everything goes smoothly. It is incurred when something goes wrong or when something goes right, and scrutiny is the consequence of success.

Organizations that receive expanded federal funding, win competitive grants, or grow into new program areas become more visible to pass-through entities, auditors, and regulators. Scrutiny scales with profile. The organizations most exposed to an evidence gap are often the ones performing best by program measures.

A single monitoring finding can trigger enhanced oversight requirements that persist for years. A corrective action plan that could have been avoided with adequate documentation becomes a fixture in the organization's compliance posture. A disallowed cost that was entirely reasonable but unprovably so becomes a repayment obligation.

None of these outcomes require fraud or negligence. They require only an evidence gap at the wrong moment.

What Clearstand Does

Clearstand installs governed evidence systems for organizations that receive or manage federal funds. We build the infrastructure that allows an organization to answer a scrutiny question on demand not to prepare for an audit, but to operate in a permanent state of readiness.

The first step is always diagnostic. We can determine in twenty minutes whether an organization is ready for scrutiny. Not whether it is compliant but whether it can prove it.

If you receive federal pass-through funds and you have not tested your proof posture, that is the question to answer first.