// Index 1: core lookup – subject + kind + Rekor presence
db.events.createIndex(
  {
    "subject.digest.sha256": 1,
    "kind": 1,
    "provenance.dsse.rekor.logIndex": 1
  },
  {
    name: "events_by_subject_kind_provenance"
  }
);

// Index 2: compliance gap – by kind + verified + Rekor presence
db.events.createIndex(
  {
    "kind": 1,
    "trust.verified": 1,
    "provenance.dsse.rekor.logIndex": 1
  },
  {
    name: "events_unproven_by_kind"
  }
);

// Index 3: generic Rekor index scan – for debugging / bulk audit
db.events.createIndex(
  {
    "provenance.dsse.rekor.logIndex": 1
  },
  {
    name: "events_by_rekor_logindex"
  }
);