VSTD v1.4.0

Source tag signature status: SIGNED_AND_GITHUB_VERIFIED (valid).

Every uploaded asset has a GitHub artifact attestation. The generated distribution assets are bound to the exact public commit by the external release manifest. The platform-evidence ZIP has its own internal manifest and preserves the four raw environment records, JUnit documents, and reconstructed bounded reports from the explicitly selected successful main-branch run. The wheel and source distribution published to PyPI are the same tested files attached here. Verify a GitHub asset with:

gh attestation verify PATH_TO_ASSET --repo TimeLordRaps/verifier

Experimental artifact-network interoperability

The package version does not promote experimental interfaces to supported compatibility
or change the project's alpha maturity. Source grounding, an actual deriver's self-status,
source relation and boundary correctness, global-cycle validity, stronger completeness,
runtime correspondence, and general composed authority axiom agency remain open obligations.
The finite mechanisms below retain their declared bounds and UNKNOWN results.

• Add content-addressed publisher silos, signed heads, key continuity, signed
  directories, deterministic export/rebuild, and a host-neutral push request.
  Reconstructibility, derivation closure, self-derivation, explicit-kind
  completeness, silo grounding, and authority axiom agency remain independent
  result axes.
  Self-derivation uses a fixed interpreted structural mechanism; census
  completeness requires an exact typed denominator across every declared
  category. Authority axiom agency requires exact alpha identity, while local
  extensions and unsupported bindings remain UNKNOWN.
  Silo grounding separately checks that the exact authority coordinate and its
  closed finite model are necessary and ground-reachable; it does not imply
  that reachable states preserve the agency floor. Compositions require their
  own full census and six-axis assessment; schema
  validity, discoverability, and signatures do not establish artifact
  correctness, real-world identity, authority, or deployed interoperability.
• Add experimental finite typed-formation production, independent checking,
  retained-silo inspection and portable receipt replay, with source-level
  obligations explicitly separate from finite syntax and byte retention.
• Add a separate bounded authority-composition checker for an exact selected
  asynchronous-interleaving model product. Package retention, catalog discovery,
  detection, planning and readiness remain nonexecuting; no source proof,
  runtime correspondence, general agency or six-axis status upgrade is implied.
• Add opt-in strict network compose --require-finite-authority-composition
  qualification: require exact selected inputs, the legacy composition admission,
  and the finite product checker together. Preserve both reports, all residual
  obligations, and the unchanged no-flag diagnostic and stored receipt semantics.

Post-release clarification

• Clarify that current-candidate evidence, final-main publication evidence, and
  unreleased source has passed it in the immutable version 1.3.0 release notes describe
  the pre-publication review coordinate. Version 1.3.0 was published from tag v1.3.0 at
  commit adc0415ea653376ed3f4c146a84daac1f72913f6; subsequent commits remain unreleased
  descendant source even while package metadata still reads 1.3.0. This clarification
  does not rewrite the tagged changelog or published release notes.