@peac/control — Greenflagged

PEAC Protocol Control - control engine interfaces and validation

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

peacprotocol

peacpeacprotocolinteraction-recordssigned-recordsreceiptsoriginarypolicyenforcementdecisionaccess-control

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	missing-githead	AI (provenance): Likely a CI/CD environment change; package is otherwise clean with no other risk signals.	ai	2026/05/19
provenance	publisher-changed	AI (provenance): Transition to GitHub Actions CI/CD publishing is confirmed by SLSA provenance attestation; stable pattern for this package.	ai	2026/04/30

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.