Optional ReadonlycommitThe commit SHA this run's evidence was generated against, stamped onto EvidenceModel.provenance.commit. Caller-supplied only -- data-cap never shells out to git itself, so omitting this records a stated absence, never a guess.
Optional ReadonlydocsOutput path for the Markdown documentation catalog.
ReadonlyevidenceWhere the persisted evidence artifact (and its .fingerprint sidecar) live, e.g. docs/data.evidence.json. Resolved against root when relative.
Optional ReadonlyexcludeGlob patterns (relative to root) that prune a file or directory regardless of include.
Optional ReadonlyexpiringHow many days out counts as "expiring soon" for the Lifecycle Model and the documentation catalog's own expiring section. Defaults to DEFAULT_EXPIRING_WITHIN_DAYS.
Optional ReadonlyflowOutput directory for the Data Flow Diagram + Security Data-Flow Review set.
ReadonlyfsThe filesystem capability, shared across every requested pass -- ./build never imports node:fs (ADR 0058).
Optional ReadonlygeneratedThe single instant every time-sensitive computation in this run shares (EvidenceModel.provenance.generatedAt, Lifecycle Model's daysRemaining), so none of them can disagree about "now". Defaults to the wall clock at the moment this function is called.
Optional ReadonlyincludeGlob patterns (relative to root) a file must match at least one of to be discovered. Defaults to every .ts/.tsx file.
Optional ReadonlylocationOutput path for the generated manifest .ts file. Omit to skip manifest generation (the inventory is still built and static rules still run).
Optional ReadonlyownershipOutput path for the Dependency & Ownership report.
Optional ReadonlypackagesExplicit cross-package schema discovery allowlist -- see resolve-package-schema.ts.
ReadonlyrootDirectory discovery/linking resolves against.
Optional ReadonlystrictEscalate every pass's warning findings to error (never info).
Optional ReadonlystrictEscalate static (ownership/sensitivity/duplication) findings to error.
Optional ReadonlystrictEscalate SENSITIVE_DATA_CROSSES_EXTERNAL_BOUNDARY/SENSITIVE_FIELD_ENDPOINT_MISSING_HANDLING findings to error -- every finding buildFlowGraph produces.
Optional ReadonlystrictEscalate proven usage findings (abandoned capabilities, unconsumed owned fields) to error -- never escalates unresolved-consumer or indeterminate findings.
Optional ReadonlytsconfigExplicit tsconfig.json path override, or false to disable alias resolution -- see LinkOptions.tsconfig.
Options for getEvidenceModel -- every
computeDataArtifacts()option, withevidencenarrowed to required.Deliberately reuses
evidencerather than introducing a separatelocationfor "where the cached artifact lives": that path and the path a real run writes its Evidence Model to are the same file by definition, and two option names for one file could disagree. (locationwas already taken by the manifest output path on the base options -- reusing it here would have quietly meant two different things depending on which function read it.) Required, because there is no honest defaultdata-capcould guess at for where a project keeps this.