Evidence bundle

A bundle packages the approved manifest, append-only events, observations, structured actions, effects, provenance, limitations and integrity metadata. It does not assign a trust score.

Shape

{
  "version": "velvt-local-evidence/1.0",
  "publicProjection": false,
  "runId": "local:<uuid>",
  "manifest": { "version": "velvt-local-manifest/1.0" },
  "testedRepresentation": { "name": "synthetic-example-agent" },
  "events": [
    {
      "id": "event:1",
      "sequence": 1,
      "type": "RUN_CREATED",
      "timestamp": "<ISO-8601>",
      "source": "velvt-local",
      "references": {},
      "payload": { "mode": "LOCAL_COLLECTION" },
      "previousHash": null,
      "hash": "<sha256>"
    }
  ],
  "observations": [],
  "actions": [],
  "effects": [],
  "provenance": { "projection": "RAW_LOCAL" },
  "limitations": ["Evidence from bounded local conditions."],
  "hashes": {
    "algorithm": "sha256",
    "eventChainHead": "<sha256>",
    "bundleSha256": "<sha256>"
  }
}

Event chain

RUN_CREATEDhash →INPUT_PRESENTEDhash →ACTION_RECORDEDhash →EFFECT_RECORDEDhash →RUN_COMPLETED

Each event records the previous event hash. The verifier recalculates event hashes, validates sequence and references, checks action, effect and provenance vocabularies, and recalculates the bundle hash.

Raw and public bundles

Raw local	Public projection
Default export behavior.	Requires explicit `--public`.
Includes inputs, response text, adapter configuration and metadata.	Excludes those fields using an allowlist.
Preserves the canonical local event chain.	Creates a distinct projected chain and hashes it separately.

What verification proves

The serialized content matches its recorded hashes.
Event order is contiguous and references point backward to existing events.
Required action, effect and provenance values use the supported vocabulary.

What verification does not prove

The actor's identity or ownership of an external profile.
That every recorded statement is truthful or the log is complete.
That an external effect occurred unless the effect carries appropriate verification evidence.
Certification, universal safety or applicability beyond this run.

Shape

Event chain

Raw and public bundles

What verification proves

What verification does not prove

References