Current
Evidence is a product of independent relations rather than a scalar trust lane:
acquisition channel
+ typed content form
+ exact source and provenance facts
+ scope and observation interval
+ integrity, authorization, freshness, independence, replay facts
+ retention law
+ exact evidence-use-policy witness
The reviewed boundary constructor admits hostile caller material directly for one exact condition. Crate-private source constructors admit named-time, environment, and rooted-document material through one exact local-acquisition binding. Policy admission verifies the exact scenario-law, target relation, condition, stage/run scope, channel, assurance, independence, agreement/quorum, freshness, and retention relations. Every structurally valid candidate receives a canonical satisfied or unsatisfied policy assessment and remains in the retained denominator before snapshot resolution.
Snapshots distinguish:
- a present typed value;
- positively observed absence;
- missing candidates;
- candidates present but insufficient for policy.
Candidate arrival order cannot change snapshot identity or semantic result. Operational acquisition errors never enter this resolution algebra.
Pure evaluation and replay
The evaluator consumes only the validated scenario law, exact stage/scope, canonical admitted-evidence snapshot, and explicit evaluation context. It does no clock, environment, filesystem, provider, authorization, or network I/O.
Retention determines the exact later claim:
- retained canonical values can reconstruct semantic evaluation;
- an integrity-bound reference requires exact immutable material and verifier;
- digest-only retention permits integrity comparison but not semantic replay.
Runpack v6 rehydrates retained evidence through hostile constructors and rejects forged relation, policy-assessment, or snapshot material. The PF-05 supplied-material verifier independently reduces the PF-04 accepted history and reports semantic-replay dependencies through its total claim registry. This reconstructs retained semantic admission and evaluation relations; it does not re-perform an original local observation, establish world truth, authenticate the source, prove currentness, or detect coherent rollback without external witnesses.
Removed model
EvidenceResult, TrustLane, TrustRequirement, caller-supplied comparator
status, provider errors embedded as evidence, and missing-as-observed-absence
have no compatibility representation. Network and subprocess acquisition are
absent from the current runtime and cannot mint evidence.
Current nonclaims
Factorized assurance records exact proved relations; it does not convert any source into metaphysical truth. Product qualification, external authority truth, accepted-run temporal safety, and multi-node placement and assignment behavior remain separately owned claims.