Decisions

What Evidence Is Required?

A practical standard for collecting enough evidence to support a decision, close a task, or justify escalation.

Use this page to decide when evidence is sufficient for a decision, closure, or escalation.

1. Problem this page solves

Teams fail in two opposite ways:

  • acting on weak evidence
  • collecting more artifacts without a decision standard

This page defines evidence sufficiency as a decision-support standard, not an artifact-volume target.

2. What you should understand after reading

After this page, you should understand:

  • what “evidence required” means in WitnessOps
  • what makes evidence sufficient for a specific decision
  • when evidence is enough to proceed, close, or escalate
  • when additional collection is not the right next move

3. Mechanism-first sufficiency path

  1. Define the decision. What decision are you making now (proceed, close, escalate, contain)?
  2. Define the claim. What claim must the evidence support for that decision?
  3. Define minimum evidence set. Identify smallest set of direct, relevant, reviewable artifacts required.
  4. Test evidence quality. Confirm artifacts are attributable, timely, and interpretable by another reviewer.
  5. Choose decision outcome. Mark sufficient/insufficient and take the appropriate action path.

4. Observed vs inferred

LayerWhat is observedWhat is inferred
Observedcaptured artifacts, receipts, logs, target facts, timestamps, method recordnone beyond recorded facts
Inferredconclusion drawn from observed artifactsjudgment quality and context interpretation

Do not treat inference as proof-bearing observation.

5. Trust assumptions

Evidence sufficiency still depends on bounded trust:

  • evidence can be partial or missing key context
  • source systems can be incomplete or misleading
  • sufficiency depends on decision type, not artifact count
  • more artifacts do not automatically mean stronger evidence

Evidence is sufficient only when it can support the decision being made without overstating what the artifacts actually show.

6. Decision outcomes

OutcomeConditionAction
Evidence sufficient to proceedclaim support meets current decision thresholdcontinue under governed path
Evidence sufficient to closeclosure claim is reviewable and boundedclose with explicit rationale
Evidence insufficient, gather morespecific missing artifact/fact is identifiable and obtainablecollect targeted additional evidence
Evidence insufficient, escalateuncertainty/risk exceeds safe local decision boundaryescalate with current evidence package
Evidence too weak for claimavailable artifacts cannot support asserted claimdo not assert claim; reframe or stop

7. Next-page handoff

Next, read Do I Need to Escalate? to apply this sufficiency standard when risk, uncertainty, or impact boundaries are crossed.

When to stopStop before closing when the artifact, method, rationale, or timeline cannot be reconstructed from the record.
Escalation triggerEscalate when the available evidence suggests broader impact but does not yet support a safe conclusion.
Evidence requiredCapture the target, time, method, observation, conclusion, and any uncertainty or follow-up action.
Next pathDo I Need to Escalate?