Evidence

The consolidated evidence and attestation service (ADR-039 D14). One deployable family, two replica roles, one database.

Start here: architecture.md.

Role	Image	Serves
`evidence-web`	`stellaops/evidence-web`	the whole `/api/evidence/v1` surface, plus the absolute proof/anchor/verify controller routes
`evidence-worker`	`stellaops/evidence-worker`	the carried background loops; no HTTP surface

Capabilities

Capability	Where it lives
DSSE attestation submit, verify and retrieval	`StellaOps.Attestor.Application`, `.Verify`
Local transparency log, checkpoints and inclusion proofs	`StellaOps.Attestor.Infrastructure/Rekor/`
Proof chains, merkle spines, receipts, content-addressed store	`StellaOps.Attestor.ProofChain`
Sealed evidence capsules, materials, exports and legal holds	`StellaOps.EvidenceLocker*`
RFC 3161 existence-time anchoring at seal	`StellaOps.EvidenceLocker.Infrastructure/Signing/`
Predicate schema registry and standard predicates	`StellaOps.Attestor.StandardPredicates`
Identity watchlist	`StellaOps.Attestor.Watchlist`
Timestamp Assurance (source-only, composed into no host — TA-4)	`StellaOps.Evidence.TimestampAssurance*`

Predecessors

Was	Now
`attestor`	retired 2026-09-05. Read `../attestor/README.md`.
`evidence-locker-web` / `evidence-locker-worker`	retired 2026-09-05. Read `../evidence-locker/README.md`.
`attestor-tileproxy`	alive and unchanged; an Evidence-family member by ownership.
`tsa`	alive and unchanged; an Evidence-family member by ownership.

signer is not in this family and never joins it: key custody is a separate service with a separate database (ADR-039 D14). Read ../signer/README.md.

Operating

Compose definition: devops/compose/docker-compose.evidence.yml, with reviewed immutable digests in devops/compose/docker-compose.local-evidence.yml.
Cutover and isolated-rehearsal runbook: ../../runbooks/evidence/evidence-evd9-data-move.md.
Operator runbooks: ../../runbooks/evidence/.