Module

Artifact Custody and Release Integrity

Keep every software, model, firmware and deployment artifact available, repairable and attributable through its entire lifecycle.

Module responsibility

Keep every software, model, firmware and deployment artifact available, repairable and attributable through its entire lifecycle.

Declare durability, availability, residency, retention and legal-hold intent per artifact class.

Operators can see whether verified copies actually satisfy policy.

Detect missing, corrupt and orphan copies, repair them idempotently and expose residue.

Artifact custody can recover without silent data loss or uncontrolled replication.

Bind immutable artifacts, signatures, attestations, policy and promotion evidence into deployable release identities.

Consumers can prove exactly what they received and which controls admitted it.

Declare durability, availability, residency, retention and legal-hold intent per artifact class.

Detect missing, corrupt and orphan copies, repair them idempotently and expose residue.

Bind immutable artifacts, signatures, attestations, policy and promotion evidence into deployable release identities.

Placement and Replication PolicyDeclare durability, availability, residency, retention and legal-hold intent per artifact class. Upload acknowledgement is not multi-site durability.
Anti-Entropy and RepairDetect missing, corrupt and orphan copies, repair them idempotently and expose residue. A corrupt source cannot repair another copy.
Release IntegrityBind immutable artifacts, signatures, attestations, policy and promotion evidence into deployable release identities. A mutable tag or pipeline name is not a release identity.