Why do I need evidence packaging for CI?

“Supply chain security frameworks like SLSA and compliance standards increasingly require provable build provenance. Evidence packages create a verifiable record of what was built, from what source, in what environment, and with what result.”