Macro-4 Standard IO Contract Evidence Section — R2-B2 (2026-06-19)

Date: 2026-06-19 · Workstream: R2-B2-MACRO-4-STAGING-WORKBENCH-IO-CONTRACT-TD-ENTRY-GATE-2026-06-19 (Deliverable 24 of 90) · Editorial revision: rev1 Class: IO contract evidence section · READ-ONLY · NON-ENACTING · NON-AUTHORIZING · NO write performed.

Metadata convention. Editorial revision (rev1) only. Storage revision/content_length authoritative at read time.

---

0. Status and non-authorization

STATUS: PASS — engineering / design-only. The evidence_surface section: append-only, records-never-decides. Engineering PASS ≠ authority PASS. Default: HOLD.

1. Purpose

Define the evidence contract so a block emits observability without ever acting as an approval.

2. Sources / evidence read

Inspect-producer §9 (S7 evidence contract); pilot-slice staging IO contract §8; Điều 32 (approvals only in S1). Main process, no reader-agents.

3. Accepted baseline (carried)

S7 records; it does not decide. A block's evidence append must never act as an approval, certify signal, or gate-pass; a block must not read its own evidence to make a decision; a "logging" write that mutates entity state is a category violation.

4. Evidence / analysis — evidence section shape

Element	Requirement
Append-only	evidence is added, never used to mutate state
Records-not-decides	never an approval/certify/gate-pass; approvals live only in S1/Điều 32
Content (AP-CLOSE)	per-run counts, run identity, rule-set version/hash, per-failure records, paths/hashes
Tagged	staging evidence tagged STAGING, distinct from production S7
Disposable	staging evidence is part of the delete-fast unit

5. Contract / requirement / matrix / result

The evidence section is downstream of the block and never an input that authorizes it. A missing evidence append degrades observability, never safety. The evidence writers are future-gated to build (S7 PARTIAL; FRESH event_outbox=215,609 undrained, no birth events).

6. Owner-gated future work

Building the evidence writers is Owner-gated; forbidden now.

7. What remains unresolved

The concrete evidence sink (audit queue / governance_audit_log / event_outbox) wiring is FUTURE_TECHNICAL_DESIGN_REQUIRED.

8. Ready for GPT/Codex review

Yes — Codex should confirm evidence never decides and never mutates entity state.