Receipts, invoices, check images linked to commits during awaiting_evidence. Documents stored with SHA-256 hashes for dedup.
After review, the commit enters the evidence window. Cannot finalize until required evidence is present.
Every uploaded document is hashed with SHA-256. Duplicates link to existing copies.
The finalization hash covers the evidence hashes. Post-finalization changes require a new commit.
Documents stored in DigitalOcean Spaces with storage_key in public.documents.
Attach receipts before finalization. The hash seals the evidence with the entry.