Storage resources, immutability, retention, and Event Hubs Capture integration were defined for the canonical evidence layer. The design was useful, but no account was provisioned or exercised.
- What worked
- The service fit long-lived, regionally hosted evidence storage and downstream Delta processing without coupling retention to the billing vendor.
- What got in the way
- Identity-based writer permissions and the final infrastructure template still required deployment-time validation.