Evidence Map is a portable kit for creating AI-assisted work artifacts that can be audited after they look finished.
It is built for source-heavy deliverables: board decks, diligence summaries, workbook reviews, questionnaires, memos, operating reviews, and status reports.
Core rule:
Evidence first. Artifact second.
Before drafting the polished artifact, Evidence Map asks for a source packet, a file specification, an evidence map, and a hostile review. The final output should show what it relies on, what is inferred, what is stale, and what still needs human judgment.
Evidence mapping is how this repo makes AI work auditable.
AI can produce a deck, memo, workbook, or document that looks finished even when the evidence underneath is weak. Evidence mapping prevents that by making every important claim point back to its source.
In this repo, a claim cannot just sit in the final artifact. It needs a source ID, date, owner, confidence level, and review status. If it is inferred, estimated, assumed, or unsupported, it has to say so.
The workflow enforces the order: source packet, file specification, draft deliverable, evidence map, hostile review, final output.
The validators are small scripts that check whether the evidence-mapping files are structured correctly. They do not prove the claim is true. They check that the trust layer is complete enough to review: source IDs are present, dates and owners are captured, confidence is labeled, assumptions and conflicts reference real sources, and numeric claims are not floating around without source dates.
That is the point of the repo: make unsupported claims visible before polished AI work gets shipped.
AI can make a deck, memo, or workbook look complete before the facts are actually traceable.
Evidence Map reduces that risk by separating three jobs:
- Inventory the source material.
- Map material claims back to evidence.
- Review the artifact for unsupported claims, stale numbers, hidden assumptions, and unresolved conflicts.
The result is not a guarantee of truth. It is an audit trail that makes the artifact easier to inspect.
Install dependencies:
npm installRun the included validation checks:
npm testStart a guided deliverable workflow:
npm run setupFor a repo-tied AI chat, use:
Run the Evidence Map workflow for this deliverable.
The operating procedure lives in .Codex/commands/evidence-map.md.
Each run creates numbered audit folders under deliverables/<project-name>/:
01-setup-check/
02-source-packet/
03-file-specification/
04-draft-deliverable/
05-evidence-map/
06-hostile-review/
07-final-deliverable/
The stages are:
- Setup check: confirm goal, audience, source files, final format, owner, and approval gates.
- Source packet: list sources, facts, assumptions, conflicts, stale material, and missing context.
- File specification: plan the artifact before drafting it.
- Draft deliverable: create the first artifact from the approved source packet and spec.
- Evidence map: connect claims, numbers, charts, cells, and tables to source IDs.
- Hostile review: enumerate unsupported claims and evidence issues.
- Final deliverable: produce the final version and record accepted risks.
docs/: concepts, workflow, risk taxonomy, and workflow templateskits/: reusable modules for source packets, evidence maps, decks, workbooks, and reviewprompts/: staged prompt templatesschemas/: JSON schemas for structured Evidence Map artifactsscripts/: setup helpers and deterministic validatorsexamples/: synthetic examples used by the validatorsdeliverables/: local generated outputs, ignored by Git except for.gitkeep
Validate the included source packet and evidence map examples:
npm run validate:examplesTry the artificial source folder:
Run the Evidence Map workflow.
Use examples/artificial-test-documents as the source folder.
The target artifact is a 5-slide board update deck for the May 2026 board meeting.
Start with the source packet and stop before the file spec.
- License: MIT
- Contributing: see
CONTRIBUTING.md - Security and data handling: see
SECURITY.md - Conduct expectations: see
CODE_OF_CONDUCT.md
Do not commit private source files, generated deliverables, local paths, customer data, or proprietary business context.