# Public Evidence Index

This document is the human-readable entrypoint for the DriveDesk Core public
evidence index.

The machine-readable index lives at:

```text
docs/public/evidence/public-evidence-index.sanitized.json
```

The index connects public capabilities to:

- the document that explains the capability;
- the sanitized evidence files that support it;
- the executable verifier commands;
- the public URL or relative path that exposes the artifact;
- the public/private boundary for that evidence group.

## Why This Exists

The public repository contains many checked artifacts: API contract, generated
SDK, recovery drills, release gates, GitOps, OpenTofu, observability, alerting,
incident response, and scheduled validation evidence.

The evidence index keeps those artifacts tied together as one contract instead
of a loose collection of notes. It is useful for release review, public export
validation, and future automation that needs to discover proof artifacts without
parsing Markdown by hand.

## Indexed Capability Groups

| Capability group | Primary doc | Verifier |
| --- | --- | --- |
| Public review bundle | `docs/public/PUBLIC_REVIEW_BUNDLE.md` | `bash scripts/check_public_review_bundle.sh` |
| Review Console | `docs/public/REVIEW_CONSOLE.md` | `bash scripts/check_public_review_console.sh` |
| Public engineering entrypoint | `docs/public/SYSTEM_REVIEW_PATH.md` | `bash scripts/check_public_system_review_path.sh` |
| Interview stack brief | `docs/public/INTERVIEW_STACK_BRIEF.md` | `bash scripts/check_public_interview_stack_brief.sh` |
| Public demo health | `docs/public/PUBLIC_DEMO_HEALTH.md` | `bash scripts/check_public_demo_health.sh` |
| OpenAPI drift | `docs/public/OPENAPI_DRIFT.md` | `bash scripts/check_public_openapi_drift.sh` |
| Business OS tour | `docs/public/PLATFORM_TOUR.md` | `bash scripts/check_public_platform_tour.sh` |
| Quick verification path | `docs/public/REVIEWER_QUICKSTART.md` | `bash scripts/check_public_reviewer_quickstart.sh` |
| Public verification matrix | `docs/public/PUBLIC_VERIFICATION_MATRIX.md` | `bash scripts/check_public_verification_matrix.sh` |
| API and SDK | `docs/public/API_BACKED_DEMO.md` | `bash scripts/check_public_demo_api.sh` |
| Core domain | `docs/public/SYSTEM_DESIGN.md` | `bash scripts/ci_smoke_public.sh` |
| Business control tower | `docs/public/BUSINESS_CONTROL_TOWER.md` | `bash scripts/check_public_business_control_tower.sh` |
| Business intake API handoff | `docs/public/BUSINESS_INTAKE_API_HANDOFF.md` | `bash scripts/check_public_business_intake_api_handoff.sh` |
| Integration hub | `docs/public/INTEGRATION_ADAPTER_CATALOG.md` | `bash scripts/check_public_demo_api.sh` and `bash scripts/check_public_provider_sandbox_dry_run.sh` |
| Connector certification | `docs/public/CONNECTOR_CERTIFICATION.md` | `bash scripts/check_public_connector_certification.sh` |
| Connector fixture replay | `docs/public/CONNECTOR_FIXTURE_REPLAY.md` | `bash scripts/check_public_connector_fixture_replay.sh` |
| Integration repair | `docs/public/INTEGRATION_REPAIR.md` | `bash scripts/check_public_integration_repair.sh` |
| Observability | `docs/public/OBSERVABILITY_PROOF.md` | `bash scripts/check_public_observability_proof.sh` |
| Observability dashboard | `docs/public/OBSERVABILITY_DASHBOARD.md` | `bash scripts/check_public_observability_dashboard.sh` |
| Notification delivery | `docs/public/NOTIFICATION_DELIVERY.md` | `bash scripts/check_public_notification_delivery.sh` |
| Alert routing | `docs/public/ALERT_ROUTING_EVIDENCE.md` | `bash scripts/check_public_alert_routing.sh` |
| Incident response | `docs/public/INCIDENT_RESPONSE_DEMO.md` | `bash scripts/check_public_engineering_proof.sh` |
| Release safety | `docs/public/RELEASE_ROLLBACK_EVIDENCE.md` | `bash scripts/check_public_release_rollback.sh` |
| GitOps and IaC | `docs/public/GITOPS_DELIVERY.md` | `bash scripts/check_public_gitops_layout.sh` |
| Private staging validation | `docs/public/PRIVATE_INFRA_VALIDATION.md` | `bash scripts/check_public_private_infra_validation.sh` |
| Scheduled validation | `docs/public/PRIVATE_INFRA_SCHEDULED_VALIDATION.md` | `bash scripts/check_public_private_infra_scheduled_validation.sh` |
| Platform maturity | `docs/public/PLATFORM_MATURITY_70.md` | `bash scripts/check_public_platform_maturity_70.sh` |
| Commercial readiness | `docs/public/COMMERCIAL_READINESS_80.md` | `bash scripts/check_public_commercial_readiness_80.sh` |

## Boundary

The evidence index is public-safe. It references synthetic data and sanitized
evidence only. It does not include private runtime addresses, credentials, raw
logs, request bodies, customer data, provider secrets, or live infrastructure
state.

## Verification

```bash
bash scripts/run_public_review_bundle.sh
bash scripts/check_public_review_bundle.sh
bash scripts/check_public_review_console.sh
bash scripts/check_public_interview_stack_brief.sh
bash scripts/check_public_evidence_index.sh
bash scripts/check_public_connector_fixture_replay.sh
bash scripts/check_public_business_control_tower.sh
bash scripts/check_public_business_intake_api_handoff.sh
bash scripts/check_public_observability_dashboard.sh
bash scripts/check_public_notification_delivery.sh
bash scripts/check_public_demo_health.sh
bash scripts/check_public_openapi_drift.sh
bash scripts/check_public_verification_matrix.sh
```

Notification delivery is exposed through `GET /demo/notification-delivery` and
the public demo payload key `notificationDelivery`.

Public demo health is tracked through `docs/public/PUBLIC_DEMO_HEALTH.md`,
`docs/public/evidence/public-demo-health.sanitized.json`, and
`bash scripts/check_public_demo_health.sh`.

OpenAPI drift is tracked through `docs/public/OPENAPI_DRIFT.md`,
`docs/public/evidence/openapi-drift.sanitized.json`, and
`bash scripts/check_public_openapi_drift.sh`.

The public verification matrix is tracked through
`docs/public/PUBLIC_VERIFICATION_MATRIX.md` and
`bash scripts/check_public_verification_matrix.sh`.

The public review bundle is tracked through
`docs/public/PUBLIC_REVIEW_BUNDLE.md`,
`docs/public/evidence/public-review-bundle.sanitized.json`, and
`bash scripts/run_public_review_bundle.sh`.

The Review Console is tracked through `docs/public/REVIEW_CONSOLE.md`,
`docs/public/evidence/review-console.sanitized.json`, the public demo
`Review` tab, the `reviewConsole` payload key, and
`bash scripts/check_public_review_console.sh`.

The interview stack brief is tracked through
`docs/public/INTERVIEW_STACK_BRIEF.md`,
`docs/public/evidence/interview-stack-brief.sanitized.json`, and
`bash scripts/check_public_interview_stack_brief.sh`.

The commercial readiness milestone is tracked through
`docs/public/COMMERCIAL_READINESS_80.md`,
`docs/public/evidence/commercial-readiness-80.sanitized.json`, and
`bash scripts/check_public_commercial_readiness_80.sh`.

The Business Intake API Handoff route is tracked through
`docs/public/BUSINESS_INTAKE_API_HANDOFF.md`,
`docs/public/BUSINESS_INTAKE_PIPELINE.md`,
`docs/public/BUSINESS_TASK_HANDOFF.md`, `docs/openapi.json`,
`sdk/generated/public-demo/`, and
`bash scripts/check_public_business_intake_api_handoff.sh`.

The check validates that:

- every indexed public document exists;
- every indexed evidence file exists;
- every indexed verifier command is present;
- every verifier referenced by the index is part of the public smoke path;
- public URLs are relative paths or the configured GitHub Pages root;
- redaction flags stay public-safe;
- the public README, review guide, status page, capability map, proof contract,
  sanitized evidence page, root Pages entrypoint, export script, release gate,
  and smoke scripts reference the evidence index.