chore: improve collectors and pins

config/sources.yaml

@@ -1,25 +1,24 @@
-# Define evidence sources and where collectors should look.
-# Keep paths external to code so collectors are layout-agnostic.
-
-vm_skills:
-  path: "../vm-skills"
-  evidence:
-    - "*/outputs/status_matrix.json"
-    - "*/outputs/audit_report.md"
-    - "*/outputs/PROOF.json"
-    - "*/outputs/ROOT.txt"
+version: "1.0.0"
 
 ops:
   path: "../vm-ops"
   evidence:
     - "20-identity/**"
-    - "60-backups/**"
-    - "70-audits/**"
+    - "60-backups/**/*"
+    - "70-audits/**/*"
 
 vm_ledger:
   path: "../vm-ledger"
   evidence:
     - "log/entries.cborseq"
+    - "target/release/ledger-cli"
+    - "target/debug/ledger-cli"
+
+vm_skills:
+  path: "../vm-skills"
+  evidence:
+    - "*/outputs/**/*restore*drill*.json"
+    - "*/outputs/**/*.json"
 
 vm_mcp:
   path: "../vm-mcp"