Evidence packs

The artefact handed to an auditor: the records as JSON, the generated documents, a manifest with per-file hashes, and a chain-verification report.