Extend

Add evidence sources without destroying the evidence model.

External data should be added as another signal with source, logic and confidence. It should not overwrite raw evidence.

Good enrichment sources

  • CMDB application ownership
  • deployment pipeline ownership
  • subscription and landing zone metadata
  • platform team mappings
  • activity and deployment log enrichment

Minimum evidence contract

Every external signal should answer four questions:

  • target — which SP, MI, RG, app or resource the evidence belongs to
  • candidate — which person, group or team may own it
  • source — where the evidence came from
  • logic — why this source implies ownership