Interface EvidenceProvenance

Who/when/what produced a given EvidenceModel instance. Caller-supplied, never ambient-detected -- generateEvidenceModel() never shells out to git itself, mirroring ADR 0012's live-expiration-callback precedent.

interface EvidenceProvenance {
    commit: string | undefined;
    generatedAt: string;
    toolVersion: string;
}