secops_ngField note #34 — F-CP-01 opens the first evidence stream.
A typed risk-analysis evidence-artifact schema under content, a cross-stream content/evidence/ index naming CP-01..CP-07, and a workflow emitter skeleton (Temporal-wrapped) writing records the schema reads.
The bridge from playbook execution to continuous-posture artefacts the audit lane consumes — now a substrate.
https://secops-ng.com/blog/2026-06-07-field-note-34-fcp01-evidence-stream-opens/