Keeping Hashes, QA, and Capability Certifications Consistent After Reassembly
A derived artifact can pass local checks while downstream QA and capability records still point to an older file. This article shows how to propagate identity changes through the full attestation graph.