An evidence export should remain understandable outside the product that created it. A PDF dashboard alone loses relationships, machine-readable fields, and integrity checks.
Pack contents
- Manifest with schema version, export time, scope, filters, time zone, record counts, gaps, and generator version.
- Entities for tenant, workspace, human/service identity, agent, workflow, policy, model, tool, connection, approval, incident, and outcome.
- Append-only events with stable IDs, timestamps, actor, action, resource, decision, reason, and parent relationships.
- Integrity metadata and checksums for files and referenced artifacts.
- Redaction log describing omitted fields and policy, without exposing the redacted value.
- Human-readable timeline linked to machine-readable records.
Validation
Provide a schema and validator. Check unique identifiers, referential integrity, timestamp format, sequence gaps, hashes, required authorization fields, and declared redactions. Include source-system references rather than copying every sensitive payload.
Portability test
Give the pack to a reviewer with no product access. They should reconstruct who authorized one action, what executed, what changed, which outcome was accepted, and where evidence is incomplete.