docs(architecture): audit Provenance records group against implementation

[ggbdpq]

Summary

Audits the Provenance records group (1 document) from #3522: docs/code-origin-audit.md, against the current implementation (22715e8).

Every re-checkable claim holds on the current tree:

• the historical scan baseline (15184428…) and the initial commit (8fd91a43…) both resolve;
• the root LICENSE registrations named by the report are present: @ai-sdk/provider-utils, @ai-sdk/provider, Astryx (two fixed revisions), trycua/cua, opencode, and models.dev;
• packages/runtime/src/model-protocol.ts carries the Apache-2.0 modification notice the report says was added; packages/runtime/src/tool-output.ts and edit-replace.ts state their opencode adaptation in their headers;
• the models.dev snapshot authority chain is intact (scripts/model-metadata/models-dev-api.snapshot.json committed; packages/core/src/model-metadata.generated.ts untracked, as the report describes);
• spot-checked table entries recorded as "absent from current main" are indeed absent;
• no zh-CN pair exists (report is source-only), and the tracking issue's drift-grep patterns return zero matches.

No drift found, so the only change is the standard frontmatter with last_verified. The report's own open items (bootstrap contributor confirmation, the human legal/ASF determination) are recorded as pending by the document itself and are not changed by this audit.

Verification

Claim	Command / route	Result
Anchor commits resolve	git cat-file -t <sha> (both)	commit
LICENSE registrations	grep LICENSE for the six named sources	all present
Source notices	grep model-protocol.ts / tool-output.ts / edit-replace.ts	all present
Absent-file claims	test -f on three entries marked absent	none exist
Generated file untracked	git ls-files packages/core/src/model-metadata.generated.ts	empty
Drift greps	six patterns from the tracking issue	zero matches
Format / headers	npm run format:check / npm run check:asf-headers	exit 0 / changed file passes

AI use

Prepared with ZCode (GLM-5.3-Flash): the agent read the report, re-verified each current-state claim against the tree, and added the frontmatter. The commit carries the Generated-by trailer.

Checklist

• One subsystem group only (Provenance records, 1 document)
• Refs #3522 in the commit message
• last_verified set to the audit date (2026-09-04)
• Historical report content left as written; only the metadata block added

[Astro-Han]

Reviewed current head b67cf4ed69d031758c8a6bbc4f15bd4a1b27be9b (OPEN). The actual diff is 12 lines of frontmatter in docs/code-origin-audit.md — no implementation changes. No P0–P3 or simplification findings.

Verified against the current checkout: provenance snapshot authority, generated outputs, runtime-host one-shot in-memory refresh, privacy/proxy credential gates, history anchors, LICENSE/source notices, absent-marked paths, and source-only metadata. Host and WebFetch share the same outbound policy/transport boundary. The doc's own bootstrap confirmations remain explicitly open items, as stated.

Evidence: exact-head hosted test green; local ASF header check and git diff --check pass; ASF/source-legal/models.dev sync/upkeep tests 69/69. What I could not judge: npm run format:check was not run locally (no node_modules in the checkout; the hosted docs-only planner skips that step).

---

Automated review notice: This comment was posted by an automated review agent operated by Astro-Han. It is not an independent human review and does not replace one.

简体中文

本条结论全部来自 @未开智选手 的审查。我自己没有读这份 diff；我核的是当前 head 有没有漂移。当前 head 是 b67cf4e，未关闭。实际改动只有 12 行元信息，无新增实现，无可定级问题。