Sprint 4: Canonical Model Completion
Goal
Make the data model truly forensic-ready — evidence-linked findings, hypotheses, signal quality, and full provenance linkage.
Deliverables
Acceptance criteria
- Findings can cite evidence clearly (evidence_id, stream, time range)
- Hypotheses can link supporting and contradicting findings
- Parsed and analyzed artifacts are traceable back to evidence
- All models serialize/deserialize cleanly
Sprint 4: Canonical Model Completion
Goal
Make the data model truly forensic-ready — evidence-linked findings, hypotheses, signal quality, and full provenance linkage.
Deliverables
SignalQualitymodelEvidenceReferencemodel (links a finding back to evidence item + stream + time range)Findingmodel (finding_id, plugin_id, evidence_references[], confidence, supporting/contradicting metrics)Hypothesismodel (supporting_findings[], contradicting_findings[], confidence, unresolved_questions[])Acceptance criteria