[dezren39]

Summary

• Record server-observed provenance for world modules: source-build compiler/platform/source digests, target, and stable compiler arguments; raw uploads are labeled as artifacts.
• Preserve optional provenance through journal replay, compaction, and restart; expose it additively in module info and WorldClient::info_details.
• Document that this is metadata, not a trust attestation. It does not add per-world execution profiles or relax sandboxing.

Validation

• cargo test --manifest-path pkgs/id/Cargo.toml --features sandbox --lib: 1,279 passed, 4 ignored.
• Focused compiler provenance tests: 14 passed.
• Focused module-info/install test passed.
• cargo check --manifest-path pkgs/id/Cargo.toml --no-default-features --features world passed.
• Changed Rust files pass rustfmt; git diff --check passed.

Stacked on PR #220 (platform-screen-adapter).

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 32678a66-32f8-410f-9f9f-58931f05d92e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[dezren39]

Merged into main through #234 (merge commit 228019a). Every commit of this branch is in main by patch; this branch was the lower layer of that stack. Closing as merged. The branch is left in place.