Add governed form evidence contract

2026-08-06 12:42:20 +02:00
parent f5949427cc
commit b5f5be15f6
3 changed files with 359 additions and 0 deletions
@@ -82,3 +82,13 @@ handling. The simulation is explicitly non-conformant, transfers no custody,
 and cannot be used as evidence of an archive handoff. A real provider requires
 a selected target/profile, provider-specific recovery declaration, and target
 test evidence.
+
+## Form Evidence Boundary
+
+Form attachments use the separate provider-neutral contract in
+`govoplan_core.core.form_evidence`. Forms Runtime requests short-lived,
+purpose-bound upload grants and re-inspects the exact provider-owned evidence
+before final submission. The provider keeps byte storage, quarantine,
+classification, and retention ownership; Forms Runtime stores only immutable
+evidence references and bounded verification results. This contract is not an
+alternative path for Records filing or archive custody.