2026-08-21 23:53:27 +02:00
|
|
|
# Evidence
|
|
|
|
|
|
2026-08-22 09:40:27 +02:00
|
|
|
This directory stores sanitized run artifacts. `offline-calibration.json` and
|
|
|
|
|
`offline-e3-calibration.json` are generated from repository-created fixtures
|
|
|
|
|
and prove only that the harness distinguishes known-good from known-bad
|
2026-08-22 21:40:33 +02:00
|
|
|
behavior. They are not target assurance. `WH-ENG-20260822-AUDIT-E2-02-abort.json`
|
|
|
|
|
is an abort record (`evidence_class: abort`), not an E2 pass or finding.
|
2026-08-21 23:53:27 +02:00
|
|
|
|
|
|
|
|
Before committing target evidence, verify that it contains no response body,
|
|
|
|
|
credential, database URL, real tenant identifier, or real tenant value. A
|
|
|
|
|
run-local digest is allowed; it must not be reusable across runs as a data
|
|
|
|
|
oracle.
|
|
|
|
|
|
