Evidence Bundle Emit

Assemble a signed Evidence Bundle (RO-Crate 1.1 ZIP) from upstream DAG outputs + per-op RunRecords. Synthesizes a ProvenanceRecord from the recipe's executed transforms, writes outputs + provenance.yaml to a staging directory, then calls folia.bundle.build.build_bundle(). The op is typically the terminal step in a recipe; it returns the bundle path + content-addressable bundle ID for downstream registration (catalog publish, transparency log, etc.).

ID	evidence_bundle_emit
Domain	geo
Category	provenance
Type	layers-to-bundle
Version	0.1.0

view yaml ◦view github ◦

Inputs

outputs: layer_list · Ordered list of upstream layer references whose data + run_records flow into the bundle. Each layer's typed result (PredictionResult, EmbeddingResult, raster, vector) contributes a ProvenanceTransform entry; if the result carries a RunRecord, the model + input hashes are pulled directly. Raw source layers contribute ProvenanceInput entries.
spec_path: file · Path to the folia.yaml that produced these outputs. Used as the bundle's spec URI. Defaults to the recipe's own file when invoked inside a DAG.

Parameters

out_dir: string · Directory where the bundle ZIP is written. Defaults to `bundles/<bundle_id>.zip` relative to the recipe's run directory.
issuer_id: string · Issuer identity for the bundle (e.g. an ORCID, a DID, or a Folia tenant ID). Overrides the `issuer` field in the recipe spec.
license: string · default CDLA-Permissive-2.0 · SPDX identifier for the bundle's license. Defaults to the recipe's `license:` field; this param overrides it.
confidentiality: string · default public · Confidentiality classification (public, confidential, restricted). Surfaced in the manifest; consumers may use it to gate access.
predecessor_bundle: string · Bundle ID of a predecessor bundle this run extends or supersedes. Encoded in the manifest's lineage.
sign: boolean · default false · Sign the bundle with the configured signing key (env var FOLIA_BUNDLE_SIGNING_KEY). When false, the bundle is built but unsigned. KMS-backed signing is deferred (see ticket US8).
log: boolean · default false · Log the bundle hash to the transparency log (folia.bundle.log_client). Requires a log endpoint to be configured; defaults to off in v1.
include_renders: boolean · default false · Include rendered preview imagery (PNG / map tiles) in the bundle. Increases bundle size; defaults to off.
methodology_refs: list · Free-form list of methodology references (paper DOIs, ADR slugs, spec anchors) recorded in the bundle's PROV-O graph.