TraceMap

Proof path index

Find the public evidence trail before repeating the claim.

This index maps TraceMap public pages and demo sections to the static evidence surfaces that support them: artifact type, rule ID or rule family, evidence tier, coverage label, proof path, limitation, and public status.

Public claim level: demo. Shared site principle: No public conclusion without evidence. Page-level demo status and per-entry public status are separate axes.

How to use it

The same evidence row should answer four readers without changing the claim.

ManagersStart with public status, coverage label, limitation, and the public-safe route that can be reviewed without raw scan internals.
ReviewersCheck the rule ID or rule family, evidence tier, coverage label, and proof path before approving wording.
EngineersFollow the scripts, samples, generated summary fixture, and public reports that reproduce or support the row.
BotsUse stable labels such as demo, future, Tier2Structural, PartialAnalysis, and route paths for link and claim checks.

Demo summary rows

Rows transcribed from the checked-in public-safe demo summary fixture.

toolchains

Supports: Public Demo Result, Demo Walkthrough.

Artifact type: generated public-safe summary row from demo-summary.json.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: FullEvidenceAvailable. Public status: demo.

Proof path: site/src/_data/demo-public-summary.json.

Limitation: Tool presence is prerequisite evidence only; it is not scan success, runtime proof, or deployment proof.

sample-scans

Supports: Public Demo Result, Evidence Packets, Capabilities.

Artifact type: generated scan summaries over checked-in public samples.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: PartialAnalysis. Public status: demo.

Proof path: site/src/_data/demo-public-summary.json and samples/.

Limitation: Raw scan-manifest.json, facts.ndjson, index.sqlite, report.md, and logs/analyzer.log stay local unless a future sanitized public sample explicitly checks them in.

combine-and-dependency-report

Supports: Demo Proof Upgrades, Demo Proof Assets.

Artifact type: combined dependency reports and public-safe summary row.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: PartialAnalysis. Public status: demo.

Proof path: /demo/proof-upgrades/ and reports/dependency/** names in the summary fixture.

Limitation: Dependency reports are static evidence over public samples, not production dependency understanding or runtime reachability proof.

paths-and-reverse

Supports: Demo Proof Upgrades, Incident Review Orientation.

Artifact type: path reports, reverse reports, and public-safe summary row.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: PartialAnalysis. Public status: demo.

Proof path: /demo/proof-upgrades/, reports/paths/**, and reports/reverse/** names in the summary fixture.

Limitation: Static paths are not runtime traces, runtime execution proof, production traffic proof, or incident-cause proof.

portfolio

Supports: Demo Proof Upgrades, Capabilities.

Artifact type: generated portfolio manifest and portfolio report family.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: PartialAnalysis. Public status: demo.

Proof path: /demo/proof-upgrades/, portfolio-manifest.json, and reports/portfolio/** names in the summary fixture.

Limitation: Portfolio rows summarize public demo inputs only; they do not imply parity across adapters, repositories, or production systems.

diff

Supports: Demo Proof Upgrades, Contract Impact Example.

Artifact type: before/after diff reports from public fixtures.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: PartialAnalysis. Public status: demo.

Proof path: samples/public-demo and reports/diff/** names in the summary fixture.

Limitation: Static diff rows are not OpenAPI completeness, runtime serializer mapping proof, traffic analysis, or deployment proof.

impact

Supports: Demo Proof Upgrades, Contract Impact Example.

Artifact type: static impact report derived from public demo diff output.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: PartialAnalysis. Public status: demo.

Proof path: /demo/proof-upgrades/ and reports/impact/** names in the summary fixture.

Limitation: Impact rows route review under demo coverage; they do not prove full impact, release safety, or production behavior.

release-review

Supports: Demo Proof Upgrades, Manager Packet.

Artifact type: release-review Markdown and JSON report family.

Rule: public.demo.summary.v1. Tier: Tier2Structural.

Coverage: PartialAnalysis. Public status: demo.

Proof path: /demo/proof-upgrades/ and reports/release-review/** names in the summary fixture.

Limitation: The checklist is review orientation, not release approval, CI policy enforcement, runtime risk prediction, or operational safety proof.

python and jvm optional rows

Supports: Public Demo Result, Capabilities.

Artifact type: generated public-safe summary rows for optional adapter lanes.

Rule: public.demo.summary.v1. Tier: Tier2Structural or Tier4Unknown.

Coverage: not_requested for Python, unavailable for JVM in the cited snapshot. Public status: demo with explicit gap labels.

Proof path: site/src/_data/demo-public-summary.json.

Limitation: Optional or unavailable rows must not be restated as parity, absence, adapter success, or clean coverage.

Artifact vocabulary

Public pages can name raw artifacts without publishing raw internals.

scan-manifest.jsonLocal scan identity, repo and commit metadata, scanner versions, and coverage context. Public only when a sanitized sample explicitly checks it in.
facts.ndjsonLocal fact stream with rule-backed evidence rows. Public pages may summarize counts and labels, not publish private raw facts.
index.sqliteLocal queryable index for symbols, endpoints, relationships, surfaces, paths, and gaps. Private SQLite files stay local-only.
report.mdHuman-readable scan report. Public-safe only when generated from public samples and reviewed for raw values.
logs/analyzer.logLocal diagnostic log for extraction and coverage troubleshooting. It is not public discovery content.
demo-summary.mdPublic-safe generated summary with statuses, rule IDs, evidence tiers, coverage labels, counts, and reasons.
demo-summary.jsonMachine-readable public-safe summary fixture used by demo pages and validation checks.
reports/**/*.mdPublic-safe report families only when produced from public samples and scrubbed by generated-output checks.
sitemap metadataThis standalone route is included in site/src/_site/pages.json; discovery metadata remains a route index, not proof by itself.

Public route surfaces

Orientation pages can help readers find proof without becoming proof.

Evidence model

Supports: tier and rule vocabulary across the site.

Artifact type: public route and repository rule catalog.

Rule family: evidence tier and rule catalog documentation. Tier: Tier2Structural.

Coverage label: no generated scan coverage label; cited route metadata uses publicClaimLevel: demo. Public status: demo.

Proof path: /evidence/ and rules/rule-catalog.yml.

Limitation: Vocabulary pages explain how evidence is labeled; they do not assert a particular repository finding.

Outputs

Supports: artifact boundary for scanner outputs and public-safe summaries.

Artifact type: public route over output families.

Rule family: artifact safety and scan-output contract. Tier: Tier2Structural.

Coverage label: no generated scan coverage label; cited route metadata uses publicClaimLevel: demo. Public status: demo.

Proof path: /outputs/, /demo/result/, and docs/ACCEPTANCE.md.

Limitation: Artifact names are not evidence rows; inspect generated summaries, reports, rules, coverage, and limitations.

Packets and manager packet

Supports: human handoff over public-safe summaries and limitations.

Artifact type: public route pair and generated demo summary references.

Rule family: packet framing and public-safe summary rules. Tier: Tier2Structural.

Coverage label: no generated scan coverage label; cited route metadata uses publicClaimLevel: demo. Public status: demo.

Proof path: /packets/, /manager-packet/, and /demo/proof-upgrades/.

Limitation: Packet copy is an orientation layer and cannot approve releases or hide reduced coverage.

Capabilities and roadmap

Supports: status labels such as main, demo, concept, future, and hidden.

Artifact type: public status routes and source docs.

Rule family: public claim gate and capability status. Tier: Tier2Structural.

Coverage label: no generated scan coverage label for the route map; cited route metadata uses publicClaimLevel: demo and future rows remain future. Public status: demo or future per row.

Proof path: /capabilities/, /roadmap/, and /limitations/.

Limitation: Future or concept wording must not be promoted into available capability until public-safe evidence exists on main.

Legacy evidence story

Supports: bounded concept discovery for hidden legacy-adjacent evidence themes.

Artifact type: public concept route plus rendered-content safety guard.

Rule family: public claim gate and content-safety validation. Tier: Tier2Structural.

Coverage label: no generated scan coverage label; cited route metadata uses publicClaimLevel: concept. Public status: future until checked-in public-safe proof exists.

Proof path: /legacy-evidence/, /legacy-validation/, and /roadmap/.

Limitation: Hidden theme rows stay hidden pending validation and are not support claims.

Docs and validation

Supports: validation, acceptance, and adapter-contract references.

Artifact type: public route plus repository docs.

Rule family: validation and acceptance documentation. Tier: Tier2Structural.

Coverage label: no generated scan coverage label; cited route metadata uses publicClaimLevel: demo and repository docs are main source material. Public status: demo for this public route.

Proof path: /docs/, /validation/, /deploy-audit/, and docs/VALIDATION.md.

Limitation: Validation routes list checks and expectations; they do not prove external CI success or deployment state.

Incident review orientation

Supports: bounded use-case discovery for incident-adjacent code review.

Artifact type: public concept route linked to demo proof rows.

Rule family: static path and packet orientation. Tier: Tier2Structural.

Coverage label: no generated scan coverage label; cited route metadata uses publicClaimLevel: concept. Public status: future until stronger public-safe proof exists.

Proof path: /use-cases/incident-review/, /demo/proof-assets/, and /limitations/.

Limitation: This route does not claim P1 root cause, runtime behavior, production traffic, endpoint performance, or release safety.

Non-claims

The index keeps the no-claims visible.

Source material

Follow the index into existing public-safe surfaces.

Public demo Public demo runbook Current demo result Demo proof upgrades Demo proof assets Evidence packet guide Manager packet Proof source catalog Review claim checklist Capability matrix Claim ledger Public roadmap Evidence glossary Legacy evidence story Docs map Validation Limitations Evidence model