The implementation requires saved evidence for findings classified as defects, rejects missing files and references outside the case folder, and copies accepted evidence into the deliverable with SHA-256 references. It writes an HTML report and an issue CSV with stable finding IDs, priorities, reproduction steps, expected and observed behaviour, and acceptance checks.