Evidence identity

Stable evidence identity lets a later operation point at the same source material after a format change.

V1–V4 migration maps legacy block identifiers onto V5 evidence identities and records that map in the migration receipt. Query hits keep source, namespace, and block identity. A host selector may return indexes. The application must keep the original hits. Selector-rewritten text is not evidence.

KAR selects a minimum set from a Committed Evidence Graph. The dossier lists why each item was selected and separates support, opposition, qualification, temporal applicability, and authority. Those types come from the declared plan.

Cortex evidence must be selected by a replayed round. An identifier, citation, or claim that names an id outside that round fails closed with CORTEX_MODEL_UNBOUND. evidenceRoot commits the source label.

Evidence Gate relations are declared by the host: the gate checks that a claim's cited span and relation match the verified image and policy. It does not invent the relation from prose.

Filters and identity are not authorization. Enforce access control before a query. See Namespace boundaries.