implementation: implement the Evidence Center and retention controls

[litroc]

Parent and phase

• Parent: goal: build docs.l-it.io as the public engineering and trust platform #15
• Type: Task
• Status: Todo
• Milestone: docs.l-it.io Foundation v1.0 (M2 Public models)
• Owner: Evidence Owner
• Blocked by: architecture: integrate and obtain approval for the architecture package #38 and the exact architecture-package approval
• Change mode: reconcile and extend

Scope and deliverables

Implement schemas and registries, normalized source records, deterministic generator/index/manifest, status views, supersession, tombstones, public/protected boundary, and retention enforcement.

Exclusions

No raw restricted artifacts in Git, default success for missing/not-applicable controls, production mutation, or work before #38 approval.

Dependencies

#30, #32, #38, #133, and #134.

Acceptance criteria

• All public records are attributable, versioned, claim-linked, and independently classifiable.
• Deterministic rebuilds match exact manifests and digests.
• Leakage sentinels fail closed.
• Failure, unavailable, withheld, expired, revoked, superseded, and tombstone states remain visible.

Validation

Schema, unit, reproducibility, content, security, retention, link, accessibility, build, and site tests.

Required evidence

Merged PR/commit, required checks, inventory disposition, deterministic manifest/digests, retention fixtures, protected-review attestation, and rollback plan.