What
When you approve an artifact publish, the approval now records the file's SHA-256, the resolved publish root and a one-time nonce. If the file changed, the nonce no longer matches, or the publish root moved between approval and execution, the publish is refused rather than going ahead with different content.
Details
- The pin also carries the root spelling and base, and publish records which tool call it consumed.
- Refusals report
source_unverified. - Telemetry adds
artifact_publish_resumewith acarriedflag. - Reachable on any publish that has a tool call id.
Evidence
"source_unverified"
Strings lifted out of the shipped bundle, so the claim above can be checked against them.