Toolkit
WorkflowVerify
Release ancestry gate
A tested shell gate that proves a prerequisite workflow run covers the required commit and belongs to the release.
Use this
Download the reusable source
Read it before copying. Replace the example paths, dimensions, workflow names, and authority boundaries with those in your own system.
Why it exists
Read the reasoning before the recipe
Evidence