Module evidence_bundle 

Evidence bundle generator (evidence-bundle-v1, GL #425, H3 Epic A).

Composes the engine’s evidence surfaces — audit-chain segment, resolved policy pack, coverage reports — into one deterministic, offline- verifiable ZIP. The independent verifier lives in packages/leanctx-verify/ and implements the contract (docs/contracts/evidence-bundle-v1.md), not this code.

Determinism: identical inputs ⇒ byte-identical archive (sorted entry order, Stored compression, ZIP-epoch timestamps, canonical JSON, no wall-clock fields in the manifest).

Structs

BundleResult

BundleSpec

Functions

generate

generate_artifact_bundle

Build a signed evidence bundle from already-materialized run artifacts.

generate_with

generate, plus the coverage report of one framework (coverage/<id>.json, manifest.framework) when framework names it and how to assess it.

Type Aliases

AssessFrameworks

Generate the bundle. Fails loudly on every inconsistency — an evidence artifact with silently missing parts would be worse than none. Answers the framework part of a bundle (the licensed runtime in production).