inite-ai Evidence API
The multimodal evidence substrate, both directions. IN: the metadata-only ingest surface — register asset headers + citation-target fragments (originUri required, storageRef rejected, no bytes — the MM-6 boundary); flags EVIDENCE_INGEST_ENABLED (off → 404) and EVIDENCE_SUBSTRATE_ENABLED (off → 503). OUT: the raw-evidence read gateway — original observation bytes back out via direct stream, signed short-lived URLs, fragment twins — behind the full deny-overrides gate ladder (scope, ABAC, tenant/availability/quarantine, ownership grants, pack modality consent, media-PII polarity), every attempt audited content-free; flag EVIDENCE_RAW_READ_ENABLED (off → 404). ACCESS: the sharing surface — grant, list and revoke the ownership rows (migration 0122) the read side spends, behind the same ownership + media-PII fences and the same uniform 404 (no existence oracle; assets are named by record id, never by content hash); flag EVIDENCE_GRANTS_API_ENABLED (off → 404).