The calculation audit, the QR-sites comparison, the invoice month filter and
the fuel-log site import each left a dated folder of evidence behind, and two
of them left a workbook the client was given:
- outputs/plant-calculation-audit-2026-11-04/Plant-calculation-audit.xlsx
- outputs/plant-vehicle-sites-2026-11-04/Plant-vehicle-QR-sites.xlsx
Those workbooks and the JSON evidence are committed so the audit trail is
durable and a number in the app can be traced back to the pass that checked
it.
The 204 screenshots (34MB) are NOT committed: they are regenerated on every
verification pass, the same way the .verify/ folder is, so they are ignored
alongside it.
Nothing in the evidence holds a credential - the only matches for "password"
or "token" are words in a description, and the database snapshot carries no
password hash, token or user email.
Dave
feb0bd404b