I1963 — Evidence is tested end to end

✕BLOCKED wave 6 · p1 · implementation profile · parallel safe

Part of test-evidence — Every verifiable claim and widget resolves to revision-bound test evidence, on every surface.

Objective

Prove across every surface that no surface is greener than the ledger, that the badge works in a browser, that tampered evidence is refused, and that coverage is shown with its commit.

Why

Each slice proves its own part. Only a case across surfaces can prove that they agree, which is what the anti-goal of a surface greener than the ledger requires.

Current state

No case compares the verdict of one subject across the CLI, HTTP, MCP, the Cockpit and the site.

Desired state

Cases cover the cross-surface comparison with the monotone rule; the badge in a browser at phone width, by click, deep link and keyboard; the refusal of a tampered dataset, ledger row and artifact; and the coverage view with its commit.

Scope

• test/cases
• test/fixtures/evidence-end-to-end
• docs/CLAIMS.yaml
• docs/claims
• .ai/repo/features/evidence.md

Out of scope

• A change to code: a defect the cases find is reported to the slice that owns it
• scripts/ui and interaction specs

Dependencies

• I1960✕BLOCKED Every widget names its proof
• I1956✕BLOCKED The Cockpit shows evidence by subject
• I1959✕BLOCKED The evidence publication is typed, bound to its build, and kept on gh-pages

What waits on this

• I1964✕BLOCKED The evidence reference is documented and held to the tree

Acceptance criteria

• One subject reads the same verdict on every surface, and each difference names its record
• The badge reaches its evidence by click, by deep link and by keyboard at phone width
• A tampered dataset, ledger row or artifact is refused, never rendered
• Coverage is shown with its commit, and never as current for another commit

Validation

• bash test/run.sh 524_no_surface_is_greener_than_the_ledger
• bash test/run.sh 525_an_evidence_badge_works_in_a_browser
• bash test/run.sh 526_tampered_evidence_is_refused
• bash test/run.sh 527_coverage_is_shown_with_its_commit

Evidence required

• no_surface_greener_than_the_ledger
• badge_works_in_a_browser
• tampering_refused

Evidence

None recorded. Every token above needs a command or an artifact behind it before this issue can be completed; narrative is refused.

Timeline

started

—

verified

—

completed

—

Those three fields, the evidence above and the state of the dependencies are all the status is made of. There is no status field to disagree with them.

Canonical record: .ai/repo/project/issues/I1963.yaml. Read it back with majordomus plan show I1963.