Split-attestation provenance: module declarations and daemon observations, never merged - #59

Closed

iceteaSA wants to merge 17 commits into

cortexkit:masterfrom

iceteaSA:feat/provenance-slice

Commits on Aug 26, 2026

manifest: add optional build provenance declaration
iceteaSA
committed
dd33e40
control: define source-tagged supervisor provenance wire
iceteaSA
committed
3642835
supervisor: retain spawn facts and probe executable identity
iceteaSA
committed
cdf01a6
supervisor: pin clearing and rescan-trap invariants in tests
iceteaSA
committed
2cfa704
control: relay declared and observed provenance without laundering
iceteaSA
committed
0816169
provenance: align build identity on the shipped build_git_sha vocabulary
iceteaSA
committed
efb169f
provenance: assert the full declared-field class against daemon leakage
iceteaSA
committed
a005f52
provenance: make the declared-field leakage sweep compile-exhaustive
iceteaSA
committed
8b8fdc0
ck: add module provenance command
iceteaSA
committed
7e30da1
ck: assert declared values never render under the observed label
iceteaSA
committed
3fbeb97
docs: document split provenance attestation
iceteaSA
committed
b5bde7b
manifest: bound declared provenance values and neutralize them at render
iceteaSA
committed
f6d7e5f
provenance: cover daemon self-identity and reject empty declarations
iceteaSA
committed
122b1ab
docs: state the declared-provenance refusal contract
iceteaSA
committed
dd5e614
provenance: revert to SUBC_BUILD_GIT_SHA / SUBC_BUILD_LOCK_DIGEST
iceteaSA
committed
b0f8776
test: assert the running-image verdict, not one platform's evidence spelling
iceteaSA
committed
8b70e02
fix: gate the evidence import to the platforms that construct it
iceteaSA
committed
aa1f2f8

Navigation Menu

Split-attestation provenance: module declarations and daemon observations, never merged - #59

Split-attestation provenance: module declarations and daemon observations, never merged#59
iceteaSA wants to merge 17 commits into
cortexkit:masterfrom
iceteaSA:feat/provenance-slice

Commits on Aug 26, 2026

manifest: add optional build provenance declaration

control: define source-tagged supervisor provenance wire

supervisor: retain spawn facts and probe executable identity

supervisor: pin clearing and rescan-trap invariants in tests

control: relay declared and observed provenance without laundering

provenance: align build identity on the shipped build_git_sha vocabulary

provenance: assert the full declared-field class against daemon leakage

provenance: make the declared-field leakage sweep compile-exhaustive

ck: add module provenance command

ck: assert declared values never render under the observed label

docs: document split provenance attestation

manifest: bound declared provenance values and neutralize them at render

provenance: cover daemon self-identity and reject empty declarations

docs: state the declared-provenance refusal contract

provenance: revert to SUBC_BUILD_GIT_SHA / SUBC_BUILD_LOCK_DIGEST

test: assert the running-image verdict, not one platform's evidence spelling

fix: gate the evidence import to the platforms that construct it