Add protected interaction evidence and measured debugging phases

packages/core/evidence.mjs

@@ -0,0 +1,13 @@
+import {z} from 'zod';
+
+// Collection controls are signed policy, independent of diagnostics and of
+// each other. Neither permission is inferred from the global switch.
+export const EvidencePolicySchema=z.object({
+ enabled:z.boolean().default(false),
+ captureDownloads:z.boolean().default(false),
+ captureInteractions:z.boolean().default(false)
+}).strict().prefault({});
+
+// Browser and server share the exact strict payload boundary.
+import payloads from './evidence-payload.cjs';
+export const InteractionEvidenceSchema=payloads.InteractionEvidenceSchema;