Evidence model

No conclusion without evidence.

TraceMap findings are records of static evidence. A finding is useful only when it carries the rule that emitted it, the confidence tier, the source location, the commit SHA, and the extractor version.

Tier 1

Semantic

Compiler-resolved symbol evidence from Roslyn, TypeScript, JVM, or adapter-specific semantic analysis.

Tier 2

Structural

Known framework, project, endpoint, SQL, package, config, or serializer structure evidence.

Tier 3

Syntax or textual

Syntax-only or text evidence that can route review but cannot prove exact symbol identity.

Tier 4

Unknown

Analysis gaps, reduced coverage, unavailable sections, or cases TraceMap cannot prove or disprove.

Fact envelope

Evidence rows are designed to survive review.

Rule IDThe documented rule or reducer stage that emitted the row.
Evidence tierThe confidence boundary for the static evidence.
File spanPath plus line span; raw source snippets are not stored by default.
Commit SHAThe repository state that was scanned or compared.
Extractor versionThe scanner/reducer version that produced the evidence.

Static evidence is not runtime proof.

TraceMap can show that static evidence exists, that coverage was reduced, or that no evidence was found under full known coverage. It does not prove production traffic, branch feasibility, deployment state, release approval, or absence of impact when analysis is partial.