max / makenotwork

Add the artifact and evidence contract crate Sando and Bento independently grew the same defect: gates vouch for one thing, the deploy ships another, and nothing guarantees they match. Both had to remember to bind evidence to bytes, and both forgot. This makes the binding the wire format between them instead of a discipline inside each. Two documents. ArtifactRecord is the handover: the manifest, the digest that names it, the provenance, and what the builder proved. EvidenceRecord is an append, naming its subject by digest, so a later producer never rewrites the handover. Both sit beside a bundle, never inside it. Evidence names the digest of what it vouches for and the digest covers every file in the bundle, so evidence stored inside would change the digest it names. Evidence also keeps arriving after the build, and if it lived in the bundle then vouching for an artifact would change that artifact's identity. Scope is a type, not a convention: a build host has no environment, so an ArtifactRecord carrying an environment-scoped gate is refused. Gate detail stays untyped so neither daemon's failure vocabulary has to move here, and learning a new failure mode stays a one-repo change. Define and emit only; nothing consumes it yet.