Transformation does not replace evidence.
SOURCE → INGEST → DERIVED ARTIFACT → EVIDENCE RECORD → TRACE / VERIFY
Each record must include full path, tool version, derived hash.
Which source, with which tool version, at what time, produced which exact derived file.
Hash ≠ Truth - verifies integrity, not truthfulness.
Timestamp ≠ Authenticity
Derived ≠ Original
System ≠ Legal chain-of-custody
Hash 可驗證檔案完整性,但不能證明來源內容本身為真。
| # | Tool | Repo Link | Corrected Info | Role |
|---|---|---|---|---|
| 1 | MarkItDown | microsoft/markitdown | MIT (core only; optional deps may differ, e.g. PyMuPDF/AGPL for OCR extras) | Core |
| 2 | Crawl4AI | unclecode/crawl4ai | Apache-2.0; project also specifies attribution requirements — check LICENSE/README | Core |
| 3 | Firecrawl | mendableai/firecrawl | AGPL-3.0 core, MIT SDK | Not Core |
| 4 | Browser Use | browser-use/browser-use | MIT | Extension |
| 5 | Scrapling | D4Vinci/Scrapling | BSD-3-Clause | Not Core |
| 6 | scrcpy | Genymobile/scrcpy | Apache-2.0 / Android control | Not Core |
| 7 | curl-impersonate | lwthiker/curl-impersonate | MIT / network compat only where permitted | Not Core |
| 8 | AutoScraper | alirezamika/autoscraper | MIT | Not Core |
| 9 | Scrapy | scrapy/scrapy | BSD-3-Clause | Extension |
| 10 | Crawlee | apify/crawlee | Apache-2.0 | Extension |