From 6e6401437b490fdc96ba3150d3e6e7d0603e4c4d Mon Sep 17 00:00:00 2001
From: Daniel Roe <daniel@roe.dev>
Date: Tue, 11 Nov 2025 16:43:15 +0000
Subject: [PATCH] chore: revert pnpm trust policy and restore provenance action

---
 .github/workflows/provenance.yml | 22 ++++++++++++++++++++++
 pnpm-workspace.yaml              |  1 -
 2 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/provenance.yml

diff --git a/.github/workflows/provenance.yml b/.github/workflows/provenance.yml
new file mode 100644
index 0000000..ab7192a
--- /dev/null
+++ b/.github/workflows/provenance.yml
@@ -0,0 +1,22 @@
+name: ci
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+permissions:
+  contents: read
+jobs:
+  check-provenance:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Check provenance downgrades
+        uses: danielroe/provenance-action@a5a718233ca12eff67651fcf29a030bbbd5b3ca1 # v0.1.0
+        with:
+          fail-on-provenance-change: true
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 2bf6361..28caeb3 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,4 +1,3 @@
 packages:
   - "playground"
-trustPolicy: no-downgrade
 
-- 
2.51.2