Summary
ValidX expanded from deterministic validation into a broader governed artifact surface, adding provenance-token checks, intake and graph gates, integrity checks, and promotion prechecks around its validation core.
What changed
- The CLI surface now includes provenance check and signing flows, intake checks, graph gates, promotion prechecks, and artifact-integrity checks.
- Sweep-gate outputs now include deterministic SBOM, contract snapshot, secrets scan, and promotion receipts.
- Mirror-export policy remains explicit: private authoritative core with a generated public interoperability surface.
Why it matters
ValidX is no longer just a validator. It now presents a broader governance membrane around content intake, verification, packaging, and promotion.
Public-safe proof points
- Deterministic validation remains the foundation across validate, explain, and repair modes.
- Promotion and artifact integrity checks are first-class CLI flows.
- Sweep gate emits deterministic governance artifacts suitable for review.
- Mirror policy preserves separation between proprietary core and public surface.
Next steps
- Keep expanding governed export and mirror controls without weakening deterministic verification.
- Use the sweep-gate receipts as the standard readiness proof for promotions.
- Preserve the membrane between private core logic and public interoperability assets.