Docs
Evidence & artifact policy
Evidence & artifact policy
What operators may commit versus what belongs only in summaries or external storage.
Allowed in git
- Short summaries of certification outcomes (PASS/FAIL tables, hashes, timestamps).
- Links or pointers to durable evidence hosted elsewhere.
Disallowed (tracked paths)
Do not commit raw certification bundles such as:
recovery-evidence/**.github/logs/**- Root blobs matching
gate*_run_*
Large execution dumps belong in external object storage or operator-local archives — never as bulk blobs inside this repository.
CI rejects tracked paths matching those patterns (npm run ci:forbid-artifacts).