Every conclusion must identify the evidence source:

- application view
- command result
- runtime event
- tool event
- model event
- developer-provided configuration

If the evidence is not present, say that it was not captured.
