Introduce shared evidence model and governance imports

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b

infospace/agent/retrieval-index.yaml

@@ -1,6 +1,6 @@
 schema: info-tech-canon.retrieval-index.v1
 infospace: canon
-item_count: 76
+item_count: 77
 items:
 - id: assimilation/emission-cadence
   kind: assimilation
@@ -656,6 +656,8 @@ items:
     target: model/organization
   - type: maps
     target: model/governance
+  - type: maps
+    target: model/evidence
   - type: maps
     target: model/task
   - type: maps
@@ -737,9 +739,12 @@ items:
   - InfoTechCanon Access Control Model
   imports:
   - kernel/itc-core
+  - model/evidence
   - model/governance
   - model/organization
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: uses
@@ -772,11 +777,14 @@ items:
   imports:
   - catalog/evidence-basis
   - kernel/itc-core
+  - model/evidence
   - model/governance
   - model/landscape
   - model/observability
   - model/purpose-demand-extension
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: uses
@@ -807,8 +815,11 @@ items:
   - InfoTechCanon Data Model
   imports:
   - kernel/itc-core
+  - model/evidence
   - model/governance
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: uses
@@ -827,13 +838,35 @@ items:
   - InfoTechCanon DevSecOps Model
   imports:
   - kernel/itc-core
+  - model/evidence
   - model/security
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: uses
     target: model/security
   warnings: []
+- id: model/evidence
+  kind: model
+  title: InfoTechCanon Evidence Model
+  canonical_path: models/evidence/InfoTechCanonEvidenceModel.md
+  source_path: ../prj-canon-federation/ledger/concept-ownership.json
+  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Evidence
+    Model.'
+  owned_concepts:
+  - Adjudication Outcome
+  - Evidence
+  - Evidence Source
+  - Evidence strength
+  - InfoTechCanon Evidence Model
+  imports:
+  - kernel/itc-core
+  relationships:
+  - type: conforms_to
+    target: kernel/itc-core
+  warnings: []
 - id: model/governance
   kind: model
   title: InfoTechCanon Governance Model
@@ -845,7 +878,10 @@ items:
   - InfoTechCanon Governance Model
   imports:
   - kernel/itc-core
+  - model/evidence
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: introduces
@@ -862,7 +898,10 @@ items:
   - InfoTechCanon Information Space Model
   imports:
   - kernel/itc-core
+  - model/evidence
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   warnings: []
@@ -877,7 +916,10 @@ items:
   - InfoTechCanon Landscape Model
   imports:
   - kernel/itc-core
+  - model/evidence
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   warnings: []
@@ -892,8 +934,11 @@ items:
   - InfoTechCanon Network Model
   imports:
   - kernel/itc-core
+  - model/evidence
   - model/security
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: uses
@@ -910,8 +955,11 @@ items:
   - InfoTechCanon Observability Model
   imports:
   - kernel/itc-core
+  - model/evidence
   - model/task
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: uses
@@ -928,7 +976,10 @@ items:
   - InfoTechCanon Organization Model
   imports:
   - kernel/itc-core
+  - model/evidence
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   warnings: []
@@ -978,7 +1029,10 @@ items:
   imports:
   - kernel/itc-core
   - model/access-control
+  - model/evidence
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: uses
@@ -995,7 +1049,10 @@ items:
   - InfoTechCanon Task Model
   imports:
   - kernel/itc-core
+  - model/evidence
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   warnings: []
@@ -1643,6 +1700,7 @@ items:
   - model/access-control
   - model/data
   - model/devsecops
+  - model/evidence
   - model/governance
   - model/network
   - model/observability
@@ -1651,6 +1709,8 @@ items:
   - model/task
   - standard/tagging
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: imports
@@ -1740,8 +1800,11 @@ items:
   - InfoTechCanon Tagging Standard
   imports:
   - kernel/itc-core
+  - model/evidence
   - model/task
   relationships:
+  - type: uses
+    target: model/evidence
   - type: conforms_to
     target: kernel/itc-core
   - type: imports
@@ -1780,10 +1843,12 @@ common_distinctions:
   - standard/caring
 - id: policy-control-evidence
   title: Policy vs Control vs Evidence
-  summary: Policy states intent or rule, control implements or enforces that rule,
-    and evidence records why the claim should be trusted.
+  summary: Governance owns policy and control; ITC-EVID owns the distinct evidence
+    assertion and its addressable source. Evidence supports a stated interest without
+    guaranteeing truth.
   source_artifacts:
   - model/governance
+  - model/evidence
   - model/security
   - model/observability
 - id: intent-scope-purpose