# Evidence Ledger Index v0.4-pre

Status: consolidated index
Date: 2026-06-18

This file indexes the source-backed evidence ledgers. It is not a replacement for the detailed ledger files.

## Ledger Files

| Ledger | Scope | Status | Main result |
| --- | --- | --- | --- |
| `EVIDENCE_LEDGER_HUB_P0.md` | HUB / Launcher / NDCAuth | source-backed P0 | Confirms open contour vs client/company contour, public pool client/context, user classifications, app access/card split. |
| `EVIDENCE_LEDGER_OPS_P0.md` | OPS Product | source-backed P0 | Confirms workspace/project/card model and `ops.card` as canonical work object. |
| `EVIDENCE_LEDGER_OPS_GATEWAY_P1.md` | OPS Gateway / MCP access | source-backed P1 | Confirms scoped agent identity/token/grant/scope/tool/idempotency/audit boundary. |
| `EVIDENCE_LEDGER_ENGINE_DIRTY_BOUNDARY_P1.md` | ENGINE-side OpsLayer / Agent Monitor / tender tech debt | source-backed P1 | Confirms this is non-canonical tech debt and must not define OPS Product. |
| `EVIDENCE_LEDGER_ENGINE_WORKFLOW_P1.md` | ENGINE L1/L2 workflow and runtime evidence | source-backed P1 | Confirms L1 graph, workflow ACL/share, L2 runtime ids/events/run/session bridge. |

## Source Roots Used

| Surface | Source root | Notes |
| --- | --- | --- |
| HUB | `/Users/dcconstructions/Downloads/mnt/data/nodedc_launcher` | Read-only source inspection. |
| OPS Product | `/Users/dcconstructions/Downloads/mnt/data/dc_taskmanager/NODEDC_TASKMANAGER` | Read-only source inspection. |
| OPS Gateway | `/Users/dcconstructions/Downloads/mnt/data/NODEDC_TASKMANAGER_CODEXAPI` | Read-only source inspection. |
| ENGINE | `/Users/dcconstructions/Downloads/mnt/NODEDC/NODEDC_ENGINE_INFRA/nodedc-source` | Read-only source inspection; runtime/data/storage excluded. |
| Ontology workspace | `/Users/dcconstructions/Downloads/mnt/NODEDC_ONTOLOGY` | Documentation-only write workspace. |

## Accepted Evidence-Based Decisions

- HUB has two operational contours:
  - open/public contour for simple users;
  - managed closed company/client contour.
- `hub.public_pool_client` is a source-backed special Client, but it must not be modeled as ordinary company context.
- OPS Product canonical work object is `ops.card`.
- OPS Product, OPS Gateway, and ENGINE-side OpsLayer are three different things.
- ENGINE-side Agent Monitor/tender UI is working tech debt, not target architecture.
- ENGINE L1/L2 split is real enough for first ontology implementation:
  - L1 = NodeDC canvas/workflow graph;
  - L2 = Engine execution workflow attached to an L1 node.
- Future interface layer is a planned platform service/layer, motivated by current ENGINE-side custom UI debt.

## Evidence Gaps That Remain Non-Blocking

- Assistant / AI Workspace needs a dedicated source pass before its entities become source-confirmed.
- `ops.responsible` needs exact source/product semantics.
- `ops.card_type` needs taxonomy.
- Gateway pairing/entitlement flow needs route-level hardening.
- Domain ontology packages need separate passes; core must not absorb domain-specific tender/ecology/transport concepts.
