Evidence-grounded process capture