docs(provenance): make tracked asset inventory reviewable and CI-enforced - #404

Merged

masarray merged 11 commits into

mainfrom

docs/per-file-asset-provenance-manifest

Sep 25, 2026

Commits on Sep 25, 2026

docs(provenance): add per-file tracked asset manifest
masarray
committed
392b363
docs(provenance): link per-file asset inventory and CI contract
masarray
committed
b3e07d4
ci(provenance): verify every tracked asset against manifest
masarray
committed
d512aff
ci(provenance): gate asset changes on reviewed manifest
masarray
committed
51022ea
fix(provenance): validate asset size from Git blob, not checkout bytes
masarray
committed
b7eedf5
Merge latest main into PR #404 workstream
masarray
committed
0b30f82
docs(provenance): replace unverified absolute IP claim with enforceable policy
masarray
committed
94f4894
fix(source-clean): scan extensionless repository policy files
masarray
committed
99b3fa1
test(source-clean): reject identifiers in extensionless and dotfile text
masarray
committed
9ffcea4
fix(source-clean): distinguish ignore policy from leaked build-path text
masarray
committed
7c8a0c9
Merge latest main into asset provenance workstream
masarray
committed
adf9c72