From 8c91f9a6c3a18fe449a28d026cc31100ceaeae20 Mon Sep 17 00:00:00 2001
From: Daniel Roe <daniel@roe.dev>
Date: Tue, 11 Nov 2025 16:42:17 +0000
Subject: [PATCH] chore: revert pnpm trust policy and restore provenance action

---
 .github/workflows/provenance.yml | 22 ++++++++++++++++++++++
 pnpm-workspace.yaml              |  1 -
 2 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/provenance.yml

diff --git a/.github/workflows/provenance.yml b/.github/workflows/provenance.yml
new file mode 100644
index 0000000..ab7192a
--- /dev/null
+++ b/.github/workflows/provenance.yml
@@ -0,0 +1,22 @@
+name: ci
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+permissions:
+  contents: read
+jobs:
+  check-provenance:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Check provenance downgrades
+        uses: danielroe/provenance-action@a5a718233ca12eff67651fcf29a030bbbd5b3ca1 # v0.1.0
+        with:
+          fail-on-provenance-change: true
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 5e2601a..737e1bc 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -2,5 +2,4 @@ packages:
   - playground
   - examples/*
   - ui
-trustPolicy: no-downgrade
 
-- 
2.51.2