Macro-5 Staging TD Candidate Evidence Model — R2-B2 (2026-06-19)

Date: 2026-06-19 · Workstream: R2-B2-MACRO-5-STAGING-BUILD-AUTHORIZATION-PACKAGE-2026-06-19 (Deliverable 18 of 110) · Editorial revision: rev1 Class: non-executable staging TD candidate (evidence model) · READ-ONLY · NON-ENACTING · NON-AUTHORIZING · NO write performed.

Metadata convention. Editorial revision (rev1) only. AgentData storage revision/content_length authoritative at read time.

NON_EXECUTABLE_TD_CANDIDATE. No SQL/DDL/command. Evidence described as content, not a sink.

---

0. Status and non-authorization

STATUS: PASS — engineering / design-only. The candidate evidence model: append-only, records-never-decides. Engineering PASS ≠ authority PASS. Default: HOLD.

1. Purpose

Define what a workbench run would append so it is observable and reproducible, never an approval.

2. Sources / evidence read

Macro-4 B2 evidence contract (D32); standard IO contract evidence section (Macro-4 lineage); operating-rules AP-CLOSE. Main process, no reader-agents.

3. Accepted baseline (carried)

B2 appends to S7 but must not act as approval; B2 must not read S7 to decide; a logging write that mutates entity state is a category violation.

4. Evidence / analysis — evidence content (families)

Element	Content family
per-run counts	scanned / passed-PEN/STAMP/GATE / failed-per-stage / skipped
run identity	producer/runner id, channel id, rule-set version/hash, start/end
per-failure records	entity, stage, failed check (audit queue)
reproducibility	paths/hashes (AP-CLOSE)
tag	STAGING for workbench runs; distinct from production S7

5. Candidate / requirement / gate / result

Evidence is append-only and downstream; B4 owns certified (derived from inspect_*); approvals live only in S1/Điều 32. FRESH event_outbox = 215,611 undrained (no birth events) — the production S7 writers stay future-gated. No evidence is emitted here.

6. Owner-gated future work

Building the evidence writers/sink is Owner-gated; forbidden now.

7. What remains unresolved

The concrete sink is FUTURE_TECHNICAL_DESIGN_REQUIRED.

8. Ready for GPT/Codex review

Yes — Codex should confirm evidence records-not-decides and carries a channel id.