Bind the versioned manifest basename to the embedded strict SemVer release version, make schema-ID plus embedded digest the provider-neutral provenance authority, and require exact pinned Rust/Cargo evidence and ordered advisory exceptions in renderer and live validation. Restrict clean-tree payloads to ignored dist paths, reject empty selectors, expand privacy canaries, run the full suite from the Make gate, preserve observer dependency versions in the minimized lock delta, and harden tar and Debian package metadata parsing. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>