Module package 

W10 calibration — stage 5: provenance + packaging.

A certified artifact is framed with a CBOR provenance header (corpus hash, engine version, gate numbers) so the engine can refuse an artifact that wasn’t produced + certified by the forge. Provenance rides as CBOR — the project’s canonical payload substrate (see the memory note feedback-cbor-ld-payloads-not-adhoc-json), not ad-hoc JSON.

Structs

Provenance

Certification provenance for a calibration artifact.

Constants

FRAME_MAGIC

Frame magic — QCAL + version.

Functions

frame_artifact

Frame artifact bytes behind the CBOR provenance header: [ MAGIC(8) | prov_len:u32 LE | CBOR(provenance) | artifact bytes ].

parse_frame

Parse a framed artifact → (provenance, artifact_bytes). The engine calls this before adopting an artifact so an unframed / corrupt / unparseable-provenance blob is rejected (fail-closed).