Where.
The Where is two places: readPoint, where the observation was made, and bizLocation, where custody was then assigned.
Both are GLN-identified locations in EPCIS 2.0. The read point is the sensor or the door; the business location is the place the object is understood to be afterward. The gateway validates that these fields conform and records them as observed.
The envelope is shaped for location resolution to a named party or site, and the resolve tool refuses rather than fakes — a typed error, never a guessed site.
readPointbizLocation
Proof, not adjectives. The gateway's conformance tests pass against GS1's normative artifacts; POST /translate, /validate and /hash answer on this origin. The dated ledger is What ships today.