Toolkit
Evidence Collection
Goal: create a factual record that another human can verify.
What to capture
- Screenshots with full URL + timestamp visible when possible.
- Emails/notifications (export headers if available).
- Server logs you control (access/error logs).
- Exact versions of files/configs (and hashes).
Rules
- Don’t alter originals. Copy them, hash them, store them.
- Separate facts from opinions.
- Write the timeline like a lab notebook.