feat: package origin as a first-class model field - #1

Merged

bomly-guy merged 8 commits into

mainfrom

claude/package-origin

Aug 19, 2026

Commits on Aug 19, 2026

feat: package origin as a first-class model field

bomly-guy
and
claude
committed
d2498fc
feat: carriers for provenance facts the model cannot express today

bomly-guy
and
claude
committed
9bb219f
fix: reconcile origin per occurrence, canonicalize host case, union attestations

bomly-guy
and
claude
committed
77e7b06
fix: bind verification to its issuer; canonicalize default ports

bomly-guy
and
claude
committed
5431c96
fix: never move a verification between issuers

bomly-guy
and
claude
committed
bc0e4d3
test: cover verification promotion within one issuer

bomly-guy
and
claude
committed
ffd159d
fix: enforce the origin rule at the wire, union digests, canonicalize escapes

bomly-guy
and
claude
committed
8aeb70b
fix: reject unusable ports; key attestations on separate digest parts

bomly-guy
and
claude
committed
cac6e5c