Evidence has to say what was actually seen.

Scores are only useful when the evidence depth is obvious. CraftedTrust separates indexed data, live checks, and manual review signals.

• IndexedRegistry or package metadata was collected. This is useful, but shallow.
• Live checkedA public endpoint responded during a scan. This improves confidence, but remains point-in-time.
• Manual reviewA human reviewed evidence outside the automated scan. This is still not a guarantee.