Introduce shared evidence model and governance imports

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b

infospace/agent/retrieval-index.md

@@ -4,7 +4,7 @@
 
 Schema: `info-tech-canon.retrieval-index.v1`
 Infospace: `canon`
-Items: **76**
+Items: **77**
 
 ## Common Distinctions
 
@@ -12,7 +12,7 @@ Items: **76**
 - **Interface deprecation vs retirement vs removal**: Deprecation guides and observes callers, retirement ends legacy behavior while retaining a metered tombstone, and removal deletes that tombstone only after the evidence gate passes. Sources: `practice-pattern/interface-deprecation-strangler`
 - **Actor vs Subject vs Principal**: Use actor for the acting entity in a context, subject for the entity a policy evaluates, and principal for the authenticated identity bound to access decisions. Sources: `model/organization`, `model/access-control`, `standard/caring`
 - **Organization Role vs AccessRole vs CARING role**: Organization roles describe responsibility or position; access roles describe permissions; CARING roles classify access-governance needs and analysis. Sources: `model/organization`, `model/access-control`, `standard/caring`
-- **Policy vs Control vs Evidence**: Policy states intent or rule, control implements or enforces that rule, and evidence records why the claim should be trusted. Sources: `model/governance`, `model/security`, `model/observability`
+- **Policy vs Control vs Evidence**: Governance owns policy and control; ITC-EVID owns the distinct evidence assertion and its addressable source. Evidence supports a stated interest without guaranteeing truth. Sources: `model/governance`, `model/evidence`, `model/security`, `model/observability`
 - **Intent vs Scope vs Purpose**: Intent captures why a producer or consumer exists, scope bounds producer ownership and promises, and purpose captures consumer demand anchored in consumer intent. Sources: `kernel/itc-core`, `model/purpose-demand-extension`, `pattern/intent-scope-purposes`, `profile/small-saas`
 
 ## Items
@@ -354,7 +354,7 @@ Items: **76**
 - Canonical path: `models/access-control/InfoTechCanonAccessControlModel.md`
 - Source path: `seeds/InfoTechCanonAccessControlModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Access Control Model.
-- Imports and anchors: `kernel/itc-core`, `model/governance`, `model/organization`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/governance`, `model/organization`
 - Owned concepts: `InfoTechCanon Access Control Model`
 
 ### InfoTechCanon Capability Model
@@ -364,7 +364,7 @@ Items: **76**
 - Canonical path: `models/capability/InfoTechCanonCapabilityModel.md`
 - Source path: `infospace/assimilation/it-capability-canon/source/ITCapabilityCanonV0.1.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Capability Model.
-- Imports and anchors: `catalog/evidence-basis`, `kernel/itc-core`, `model/governance`, `model/landscape`, `model/observability`, `model/purpose-demand-extension`
+- Imports and anchors: `catalog/evidence-basis`, `kernel/itc-core`, `model/evidence`, `model/governance`, `model/landscape`, `model/observability`, `model/purpose-demand-extension`
 - Owned concepts: `Capability`, `CapabilityConsumption`, `CapabilityContract`, `CapabilityDomain`, `CapabilityEvidenceHook`, `CapabilityInclusionRule`, `CapabilityMaturityLevel`, `CapabilityProfile`, `CapabilityProvider`, `CapabilityProvision`, `CapabilityQualityDimension`, `CapabilityRequirement`, `CapabilityResourceClass`, `InfoTechCanon Capability Model`
 
 ### InfoTechCanon Data Model
@@ -374,7 +374,7 @@ Items: **76**
 - Canonical path: `models/data/InfoTechCanonDataModel.md`
 - Source path: `seeds/InfoTechCanonDataModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Data Model.
-- Imports and anchors: `kernel/itc-core`, `model/governance`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/governance`
 - Owned concepts: `InfoTechCanon Data Model`
 
 ### InfoTechCanon DevSecOps Model
@@ -384,9 +384,19 @@ Items: **76**
 - Canonical path: `models/devsecops/InfoTechCanonDevSecOpsModel.md`
 - Source path: `seeds/InfoTechCanonDevSecOpsModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon DevSecOps Model.
-- Imports and anchors: `kernel/itc-core`, `model/security`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/security`
 - Owned concepts: `InfoTechCanon DevSecOps Model`
 
+### InfoTechCanon Evidence Model
+
+- ID: `model/evidence`
+- Kind: `model`
+- Canonical path: `models/evidence/InfoTechCanonEvidenceModel.md`
+- Source path: `../prj-canon-federation/ledger/concept-ownership.json`
+- Summary: Domain model used by canon profiles and standards: InfoTechCanon Evidence Model.
+- Imports and anchors: `kernel/itc-core`
+- Owned concepts: `Adjudication Outcome`, `Evidence`, `Evidence Source`, `Evidence strength`, `InfoTechCanon Evidence Model`
+
 ### InfoTechCanon Governance Model
 
 - ID: `model/governance`
@@ -394,7 +404,7 @@ Items: **76**
 - Canonical path: `models/governance/InfoTechCanonGovernanceModel.md`
 - Source path: `seeds/InfoTechCanonGovernanceModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Governance Model.
-- Imports and anchors: `kernel/itc-core`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`
 - Owned concepts: `InfoTechCanon Governance Model`
 
 ### InfoTechCanon Information Space Model
@@ -404,7 +414,7 @@ Items: **76**
 - Canonical path: `models/information-space/InfoTechCanonInformationSpaceModel.md`
 - Source path: `seeds/InfoTechCanonInformationSpaceModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Information Space Model.
-- Imports and anchors: `kernel/itc-core`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`
 - Owned concepts: `InfoTechCanon Information Space Model`
 
 ### InfoTechCanon Landscape Model
@@ -414,7 +424,7 @@ Items: **76**
 - Canonical path: `models/landscape/InfoTechCanonLandscapeModel.md`
 - Source path: `seeds/InfoTechCanonLandscapeModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Landscape Model.
-- Imports and anchors: `kernel/itc-core`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`
 - Owned concepts: `InfoTechCanon Landscape Model`
 
 ### InfoTechCanon Network Model
@@ -424,7 +434,7 @@ Items: **76**
 - Canonical path: `models/network/InfoTechCanonNetworkModel.md`
 - Source path: `seeds/InfoTechCanonNetworkModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Network Model.
-- Imports and anchors: `kernel/itc-core`, `model/security`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/security`
 - Owned concepts: `InfoTechCanon Network Model`
 
 ### InfoTechCanon Observability Model
@@ -434,7 +444,7 @@ Items: **76**
 - Canonical path: `models/observability/InfoTechCanonObservabilityModel.md`
 - Source path: `seeds/InfoTechCanonObservabilityModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Observability Model.
-- Imports and anchors: `kernel/itc-core`, `model/task`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/task`
 - Owned concepts: `InfoTechCanon Observability Model`
 
 ### InfoTechCanon Organization Model
@@ -444,7 +454,7 @@ Items: **76**
 - Canonical path: `models/organization/InfoTechCanonOrganizationModel.md`
 - Source path: `seeds/InfoTechCanonOrganizationModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Organization Model.
-- Imports and anchors: `kernel/itc-core`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`
 - Owned concepts: `InfoTechCanon Organization Model`
 
 ### InfoTechCanon Purpose And Demand Model Extension
@@ -464,7 +474,7 @@ Items: **76**
 - Canonical path: `models/security/InfoTechCanonSecurityModel.md`
 - Source path: `seeds/InfoTechCanonSecurityModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Security Model.
-- Imports and anchors: `kernel/itc-core`, `model/access-control`
+- Imports and anchors: `kernel/itc-core`, `model/access-control`, `model/evidence`
 - Owned concepts: `InfoTechCanon Security Model`
 
 ### InfoTechCanon Task Model
@@ -474,7 +484,7 @@ Items: **76**
 - Canonical path: `models/task/InfoTechCanonTaskModel.md`
 - Source path: `seeds/InfoTechCanonTaskModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Task Model.
-- Imports and anchors: `kernel/itc-core`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`
 - Owned concepts: `InfoTechCanon Task Model`
 
 ### Intent Scope Purposes Pattern
@@ -744,7 +754,7 @@ Items: **76**
 - Canonical path: `standards/caring/InfoTechCanonCaringAccessGovernanceStandard.md`
 - Source path: `seeds/InfoTechCanonCaringAccessGovernanceStandard.md`
 - Summary: Cross-cutting canon standard: InfoTechCanon CARING Access Governance Standard.
-- Imports and anchors: `kernel/itc-core`, `model/access-control`, `model/data`, `model/devsecops`, `model/governance`, `model/network`, `model/observability`, `model/organization`, `model/security`, `model/task`, `standard/tagging`
+- Imports and anchors: `kernel/itc-core`, `model/access-control`, `model/data`, `model/devsecops`, `model/evidence`, `model/governance`, `model/network`, `model/observability`, `model/organization`, `model/security`, `model/task`, `standard/tagging`
 - Owned concepts: `CARINGAccessDescriptor`, `CARINGAnalysisFitnessTest`, `CARINGAnalysisProcedure`, `CARINGCanonicalRole`, `CARINGCapabilityProfile`, `CARINGDeclaredAccessMap`, `CARINGDerivedCapability`, `CARINGEffectiveAccessMap`, `CARINGExposureEvent`, `CARINGExposureMode`, `CARINGInducedAccess`, `CARINGOrganizationRelation`, `CARINGPlane`, `CARINGRedesignProcedure`, `CARINGRestrictionPrecedence`, `InfoTechCanon CARING Access Governance Standard`
 
 ### InfoTechCanon Emission Cadence Standard
@@ -774,5 +784,5 @@ Items: **76**
 - Canonical path: `standards/tagging/InfoTechCanonTaggingStandard.md`
 - Source path: `seeds/InfoTechCanonTaggingStandard_RC1_seed.md`
 - Summary: Cross-cutting canon standard: InfoTechCanon Tagging Standard.
-- Imports and anchors: `kernel/itc-core`, `model/task`
+- Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/task`
 - Owned concepts: `InfoTechCanon Tagging Standard`