Module evidence 

Evidence model and collectors.

Evidence is the only input the rules engine consumes. Cases and log lines are normalized into Evidence items here; diagnose() never reads a Case or a raw log line directly. That separation is what keeps the rules engine a pure function over evidence.

Two collection paths exist:

• collect_evidence takes a Case plus the contents of its log file and produces the union, with cross-source dedup (see [is_redundant_with] below).
• parse_log takes only a log string and is used by the diagnose-log subcommand for ad-hoc analysis when no JSON case is available. The log markers it recognizes are documented in docs/architecture.md.

Enums

Evidence

A single normalized signal extracted from a request/response, env context, or a log line.

Functions

collect_evidence

Collect evidence from a Case and the contents of its log file.

parse_log

Parse a log buffer into evidence items by scanning for known markers.