add_evidence
Attach auxiliary metadata evidence such as documents, links, or code references to a security control. Evidence provides context without affecting implementation status.
Instructions
Attach auxiliary metadata to a control (docs, links, artifacts).
Evidence is contextual metadata — it does NOT count toward implementation status. Only assertions prove controls.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | Optional file path or URL. | |
| type | No | Evidence type: "code", "test", "config", "document", "link". | code |
| label | No | Description of evidence (required). | |
| model_id | Yes | ID of the threat model. | |
| control_id | Yes | ID of the control. | |
| server_version | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||