Evidence vault & recovery passport

Drill reports vs signed passports.

• Drill report — full job JSON + PDF certificate from Evidence Vault (type: Drill report).
• Recovery passport — compact signed JSON with readiness summary (type: Recovery passport). Download from run detail or Evidence Vault.
• Both are org-scoped, SHA-256 verified on download, and listed in the audit log.

Open the vault at https://revenant-cloud-web.web.app/evidence after drills complete.