//! [`ArtifactProvenance`] — where a component's `.wasm` bytes came from and how to verify them.
use ;
/// Identifies and verifies the `.wasm` artifact a [`crate::ComponentManifest`] describes.
///
/// A real `ComponentValidator` implementor is expected to check
/// `checksum_sha256` against the actual component bytes before ever
/// loading them — this type only carries the claim, it does not verify it
/// itself (verification is an adapter concern, per ADR-001's port/adapter
/// split).