prep docs and service updates

docs/modules/evidence-locker/prep/2025-11-20-schema-readiness-blockers.md

@@ -0,0 +1,29 @@
+# Evidence Locker Schema Readiness Prep — PREP-EVIDENCE-LOCKER-GUILD-BLOCKED-SCHEMAS-NO
+
+Status: Draft (2025-11-20)
+Owners: Planning · Evidence Locker Guild · AdvisoryAI Guild · Orchestrator/Notifications Guild
+Scope: Capture the exact signals still missing to unfreeze Evidence Locker replay/bundle schemas, so downstream implementation can proceed without ambiguity.
+
+## Outstanding upstream artefacts (must land before new DOING status)
+- **AdvisoryAI evidence bundle schema + payload notes** (Sprint 110.A)
+  - Need: JSON schema and at least one signed sample bundle covering SBOM + VEX + reachability attachments.
+  - Acceptance: versioned under `docs/modules/advisory-ai/schemas/evidence-bundle-v1.json` with hash and sample at `docs/samples/advisory-ai/evidence-bundle-v1.json`.
+- **Orchestrator + Notifications capsule envelopes** (Sprint 150.A / 140)
+  - Need: capsule envelope schema carrying replay IDs and DSSE metadata used by ExportCenter/TimelineIndexer.
+  - Acceptance: schema at `docs/events/orchestrator-scanner-events.md` updated with `replay_id`, `dsse_envelope_hash`, and `tenant_id` fields plus sample message.
+- **Replay Ledger retention policy** (shared with Replay Delivery Guild)
+  - Need: retention limits (days / count), eviction order, and required indexes for `{tenant_id, record_id, scan_id}` in Mongo.
+  - Acceptance: recorded in `docs/replay/DETERMINISTIC_REPLAY.md` section 8 with deterministic eviction rules.
+
+## Ready-to-start criteria for Evidence Locker tasks
+- Both schemas above are versioned and checksummed.
+- Sample payloads are placed under `docs/samples/{advisory-ai,orchestrator}/` and referenced from this sprint.
+- Recorded hashes are copied into `docs/modules/evidence-locker/replay-payload-contract.md` (section 5 once available).
+
+## Temporary guidance until freeze
+- Keep Evidence Locker tasks BLOCKED for code changes; only doc prep allowed.
+- Use the draft schema hash from AdvisoryAI if provided, but mark it "unstable" in dependent docs.
+- Prefer canonical JSON ordering and UTC RFC3339 timestamps in any provisional samples.
+
+## Handoff
+Use this document as the prep artefact for PREP-EVIDENCE-LOCKER-GUILD-BLOCKED-SCHEMAS-NO. Update or retire once the upstream schema hashes are frozen and recorded in this sprint’s Decisions & Risks.