Identity
Publisher, version and SHA-256 digest must match the signed manifest. An unsigned or unmanifested build fails here and goes no further.
- Signature chain verified to a known publisher
- Digest matches the artifact byte for byte
- Version is declared, not inferred