Source authority / PG-024

Publication And Provenance System

The website publishes static pages and public assets through manifests, hashes, and validation gates. Those records make publication auditable. They do not make the website a source of scientific truth.

Diagram showing source basis feeding page route map, page provenance, source manifest, asset manifest, static build, internal reader routes, provenance links, and a publication-is-not-source-truth boundary.
Publication manifests make routes and assets auditable without making publication source truth.Mermaid source: docs/content-dossiers/source-authority-publication-and-provenance-system/diagrams/publication-provenance-system.mmd. Manifest id: comprehension_source_authority_publication_provenance_system.

Why provenance exists

Publication needs audit evidence, not authority inflation.

A static page can drift, a public asset can be regenerated, and a source dependency can change. The provenance system records enough structure to inspect those changes while preserving the rule that upstream sources and governed records own project claims.

Manifest roles

Each manifest answers a different audit question.

The manifests are not interchangeable. One declares route intent, one records page provenance, one records asset source/status metadata, and one verifies the files served from the public build.

Route map
page_route_map.jsonDeclares each public route, its local page source, source basis, publication status, and boundary type.
Page provenance
page_provenance.jsonRecords generated page hashes, source dependency hashes where available, commit metadata, and provenance URLs.
Source manifest
source_manifest.jsonRecords public asset source paths, approval status, notes, and asset-level claim-status boundaries.
Asset manifest
asset_manifest.jsonIndexes served public files with byte counts, hashes, kinds, titles, and source-manifest references.

Hash boundaries

Hashes identify state; they do not certify meaning.

The useful question is narrow: did this page, dependency, or asset match the recorded bytes? The stronger question, whether the page is conceptually complete or a claim is true, remains outside hash authority.

Page hash
Identifies rendered source stateUseful for detecting page drift. It does not prove that the explanation is complete or conceptually correct.
Source hash
Identifies a dependency versionUseful for source audit. It does not promote a claim, resolve a gate, or replace source review.
Asset hash
Identifies served bytesUseful for verifying that a file matches the manifest. It does not make a diagram, PDF, or image authoritative.
Validator pass
Confirms a bounded checkUseful as build evidence. It does not become scientific proof, release approval, or human review.

Internal-first routing

Primary reading stays on reviewed internal routes.

Internal-first routing is a readability rule. It keeps readers on curated website explanations when those routes exist, while keeping manifest and source links visible as provenance for inspection.

Safe reading

A useful summary names the forbidden shortcut.

Safe summary
Auditable publication statePublication provenance records which routes, sources, manifests, and public assets were checked for a static website state.
Unsafe summary
Manifest equals truthA route-map row, page hash, source hash, asset hash, or internal-first link proves a scientific claim, grants release approval, or replaces source authority.

Source provenance

Use source links for audit, not as the primary reading path.

The links below expose implementation evidence for maintainers. Public reading should start with the internal routes above, then inspect these files when an audit trail is needed.

Source authority