Self-Attested Data And Trust Boundaries

One argument in a fix commit put the audited receipt in charge of its own verdict

It shipped inside a commit whose message promised the opposite, an automated reviewer found it in under four minutes, and the repair now keeps the list of deciding fields frozen in the consumer instead.