Mintmark 0.1.3

The audit release. Every fix here came from checking the published product rather
than the source tree: cloning the packs, installing the engine from PyPI, and
running the documented commands against the released datasets.

The pack digest covered files that cannot affect output

It enumerated the whole pack directory minus a short denylist, so it covered
README files, the changelog, the test suite, the lockfile, the vendored engine
wheel, compiled __pycache__ output, and PLAN.md, a file the sector packs
deliberately keep out of git.

One pack produced three different digests for one set of declarations: one in a
working tree, another from a clean clone of the same commit, and a third recorded
in an already published dataset. Running the suite under a different pytest
version moved it too, through the .pyc files.

A digest behaving that way cannot do the job it exists for, which is to let
somebody holding a dataset tell whether a pack they have is the pack it came
from. It now covers pack.yaml and the fields/, recipes/, templates/,
lexicons/, and assets/ directories, by allowlist rather than denylist.

Every manifest records a different pack.digest from here on. No emitted
data moves: the digest seeds nothing. The published reference datasets in the
sector packs have been re-minted and their release assets replaced so they carry
the new digest.

reproduce works on the quickstart's own output

It could not locate the pack the engine itself ships, so a dataset minted from
--pack example could not be reproduced by the command the README calls the
check that makes a manifest mean something.

reproduce says what differs

differs outside the excluded provenance block was true and useless. It now
names each field with both values, and a difference confined to the engine
version is reported as what it is rather than as a mismatch: a newer engine
reproducing every byte is a stronger result than the determinism claim, which
covers a fixed engine version.

Attached

Asset	What it is
mintmark-0.1.3-py3-none-any.whl	The wheel, identical to the one on PyPI
mintmark-0.1.3.tar.gz	The source distribution
sbom.json	CycloneDX software bill of materials
SHA256SUMS	A checksum for each of the above

The name is frozen: trademark screening cleared on 2026-08-22.