lockfile

Content-addressed proof that a DSH profile declaration, pnpm lock and installed bundles agree

Compatibility governance for DeepSeek Harness: upgrade pre-flight gate, storage-format fingerprint, backup, session migration, per-profile lockfile, plugin x DSH compat matrix.

Readproof — the lockfile and replay primitive for what AI agents read: stable identity, freshness policy, content-addressed snapshots, per-run manifests, diff, byte-exact replay, evidence bundles.