Runtime evidence index and retention

scripts/runtime-evidence-index.sh builds a stable JSON index across runtime validation pack evidence and SSH runtime evidence.

Build or refresh the index:

scripts/runtime-evidence-index.sh

The default index path is:

dist/runtime-evidence-index.json

Verification

Use --verify to validate every discovered SHA256SUMS file before the index is written:

scripts/runtime-evidence-index.sh --verify

Verification covers runtime validation pack directories under dist/runtime-packs and SSH runtime evidence files under dist/runtime-evidence.

Retention

Use --retain N to keep only the latest N runtime validation pack runs per pack and the latest N SSH runtime evidence runs:

scripts/runtime-evidence-index.sh --verify --retain 10

Retention rewrites the runtime evidence checksum file after pruning SSH evidence files.

Automatic index updates

scripts/runtime-validation-packs.sh and scripts/runtime-evidence.sh update the index automatically after producing evidence. Disable this only while debugging a narrow failure:

AUTOMAX_RUNTIME_EVIDENCE_INDEX_UPDATE=0 scripts/runtime-validation-packs.sh --pack package-only

Useful controls:

AUTOMAX_RUNTIME_EVIDENCE_INDEX=dist/runtime-evidence-index.json
AUTOMAX_RUNTIME_EVIDENCE_RETAIN=10

Index schema

The index has a stable top-level shape:

{
  "schema_version": 1,
  "generated_at": "2026-01-01T00:00:00Z",
  "entry_count": 1,
  "entries": []
}

Entries use type: runtime-pack or type: runtime-evidence and include relative paths to manifests, summaries, checksums and evidence files.