Pin the code that defines inherited provenance checks
Pin the code that defines inherited provenance checks before importing or trusting its tables. A derived experiment may validate every data/config hash listed by an earlier launcher yet still have a circular trust gap if that launcher itself is not checked against a known-good di…