Conform source attestation to estate v1 contract

#5
by betterwithage - opened

Emit szl.deployment-source/v1 with canonical source.repository, deployment.hf_space, and a dynamically measured Hub repository-head deployment.hf_revision. Keep PENDING_GITHUB_SYNC and explicitly state that repository head is not proof of the exact serving process revision. Return 503/UNKNOWN rather than a stale SHA when Hub evidence is unavailable. Compile, selftest, 4 focused tests, and the actual v2 drift comparator pass with zero Killinchu revision-attestation mismatches.

Canonical identity fields, honest Hub-head semantics, failure-to-UNKNOWN behavior, focused tests, and actual drift-comparator validation verified.

betterwithage changed pull request status to merged

Sign up or log in to comment