Index Provenance

Provenance answers the question that follows any surprising retrieval result: why is this here. Without it, an unexpected record in a retrieval surface can only be investigated by re-running ingestion and hoping the behaviour reproduces. With it, the path is inspectable — this came from that system, was transformed by these rules, was classified this way, on this date. The requirement becomes acute during audit, where 'we believe our rules excluded that category' is materially weaker than showing the transformation that did.

Because ingestion in Centralpoint is performed by Data Transfer and Data Cleaner against a versioned dictionary, each record's classification reflects rules whose state at that time is recoverable. The index sits in the organization's own environment, so the entry and its basis are both inspectable rather than opaque.