CAIN-INV-1671: deployment provenance — bind the RUNNING code to a verifiable source digest

VERIFIED source compiles

Domain	CRYPTOGRAPHIC_EVIDENCE
Tier	IMPLEMENTATION
Source	`platform-gateway/cain_deployment_provenance.py`
Mapped tests ran	16
Passed / failed / errored	16 / 0 / 0
Compiles	yes

Mapped tests

platform-gateway/tests/test_status_guard_and_deployment_provenance.py

tests/test_deployment_provenance.py

Generated 2026-10-06T19:15:35Z from git unknown. This page is a republication of the run result; it is not an independent audit.

Same-project verification only. The tests are authored in this repository; no third party has reviewed or reproduced these results. VERIFIED means the mapped tests passed in this run, not that the mechanism is independently correct.