Evidence Manifest

An evidence manifest makes the verification boundary explicit.

{
  "artifact": "report.pdf",
  "artifact_sha256": "3f4c...",
  "sources": [
    {
      "path": "source-a.md",
      "sha256": "91a2..."
    },
    {
      "path": "source-b.md",
      "sha256": "dd47..."
    }
  ],
  "verification_contract": "example-v1"
}

Why this matters

The manifest separates:

• the artifact
• its source set
• integrity information
• the verification contract

A verifier can therefore inspect what is actually being claimed.