I1961 — A deploy verifies the evidence routes it publishes

Make pages-check probe the evidence routes a deploy published, deriving the probes from the published evidence-subjects.json rather than from a hand-written list.

BLOCKED wave 5 · p1 · implementation profile · parallel safe

Part of test-evidence — Every verifiable claim and widget resolves to revision-bound test evidence, on every surface.

Blocked. This issue cannot start until I1959, I1958 are done. The status is derived from that, not declared.

Objective

Make pages-check probe the evidence routes a deploy published, deriving the probes from the published evidence-subjects.json rather than from a hand-written list.

Why

A route the build generated and the deploy lost is a badge that links nowhere. ADR 0087 names the deploy check as one mechanism against a badge verified for a revision it did not test.

Current state

scripts/ci/pages-check verifies the published site and knows nothing of evidence routes.

Desired state

pages-check reads the published subject index and probes the evidence index, the first subject of each kind, coverage and runs, and refuses published evidence that does not name the deployed commit.

Scope

scripts/ci/pages-check
scripts/pages
.github/workflows/pages.yml
test/cases
docs/CLAIMS.yaml
docs/claims/deploy-verifies-evidence-routes.md
.ai/repo/features/ci.md

Out of scope

A hand-declared list of routes to verify

Dependencies

Acceptance criteria

The probes are derived from the published subject index, and a route missing from the deploy fails the check naming it
Published evidence that does not name the deployed commit is refused

Validation

bash test/run.sh 521_deploy_verifies_evidence_routes

Evidence required

deploy_verifies_evidence_routes

Evidence

None recorded. Every token above needs a command or an artifact behind it before this issue can be completed; narrative is refused.

Risk

It also waits on PR #593.

Timeline

started: —
verified: —
completed: —

Those three fields, the evidence above and the state of the dependencies are all the status is made of. There is no status field to disagree with them.

Canonical record: .ai/repo/project/issues/I1961.yaml. Read it back with majordomus plan show I1961.