# Portable Stocky forensic evidence pack

Use this folder when live Stocky API export is no longer available or when API/UI evidence is
incomplete. It records provenance and gaps; it does not promise a complete reconstruction.

## Suggested folder layout

```text
stocky-forensic-case/
├── 00-register/
│   ├── forensic-evidence-register.csv
│   └── forensic-gap-report.md
├── 01-originals-read-only/
│   ├── stocky-ui/
│   ├── shopify-native/
│   ├── accounting/
│   └── correspondence/
├── 02-working-copies-redacted/
├── 03-reconciliation/
└── 04-deliverables/
```

Keep originals unchanged. Work only from copies. Do not include a Stocky API key, password, or
credential screenshot anywhere in this folder.

## Intake each file

1. Copy the file into `01-originals-read-only/` without renaming it.
2. Record its original filename, source, export/observation dates, page or record count, provenance,
   known gaps, and next action in `forensic-evidence-register.csv`.
3. Calculate SHA-256 and record the result.
4. Create a redacted working copy only when review requires it; never overwrite the original.

macOS:

```bash
shasum -a 256 "/absolute/path/to/file"
```

Windows PowerShell:

```powershell
Get-FileHash "C:\absolute\path\to\file" -Algorithm SHA256
```

## Classification rule

- **Original** — a source file directly establishes the recorded fact.
- **Inferred** — two or more sources support a candidate, but no original Stocky record proves it.
- **Unverifiable** — the available sources cannot establish the field, date, state, or relationship.

Never rewrite an inferred candidate as an original Stocky fact. Keep explicit links from each
statement in the gap report to evidence IDs in the register.

## Close the case

Deliver the originals, evidence register, gap report, reconciliation notes, and next steps to the
merchant. If a service provider received files under separate written consent, use the agreed
secure channel and retention period, then send deletion confirmation. The merchant's copy must
remain useful without ShelfTally.