The Provenance Layer — Or, You Can't Audit What You Can't Rebuild
Yesterday was the solvency layer (#63): the vendor holding your switch can run out of money. Today's front page answers the next question down — how do you know what the thing on your machine actually is? "OpenCode Hacked: User credentials leaked" (743 pts). A tool developers installed, trusted, and ran with their keys ended up handing those keys to someone else. The headline reads like a breach…
The "Provenance Layer" highlights the importance of being able to rebuild and verify the authenticity of software dependencies. Just as the solvency and identity layers address the risks of vendors running out of money or credentials being compromised, provenance asks whether the artifact you are using is the one you think it is. This layer is often overlooked, as developers trust package names, tags, and URLs, but these are easily manipulated.
The key issue is that most dependencies cannot be rebuilt from public inputs, meaning you lack provenance. Publishing source code is not enough; you need to be able to reproduce the exact artifact from public inputs and compare it. Auditability is crucial, but it's not just about having a PDF of the code, but being able to compare it with others.
To implement provenance, pin dependencies by their digest (hash) rather than tags, use lockfiles with integrity hashes, and provide checksums for model weights. Give tools the least authority necessary and use separate, scoped, and short-lived keys for each tool. Before installing new tools, assume they are hostile and identify what they could potentially reach. Run a rebuild test on your critical dependencies at least once a quarter to ensure you can actually reproduce them from source.
Benchmark any claims, like hardware performance for local LLMs, as hardware vendors may inflate numbers. Treat deprecations as provenance events, as the runtime your code depends on can silently change. Always verify the bytes you're running by reproducing the artifact. Provenance comes at a cost, but it's necessary to avoid running someone else's code with your keys.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.