Extends the dirty-bake provenance follow-on's publish-command endpoint with
the -r<N> derivation duty (user question 2026-08-08: must -Dlibrev be
manual?): the build recipe cannot safely self-derive (deliberate-publish
discipline, no configure-time mutable-state inputs, rev-inside-artifact
means comparison must build AT the published rev and sha1-compare);
publish verdicts current / bump to max+1 / alpha in-situ replace, asserted
on a checked claim. Records the recipe-default-as-published-state
convention (familyrev precedent) and librev's observed drift as the manual
failure mode - default+comment repair due at the r2 publish. goals_lint
clean.
Assisted-by: harness=claude; primary-model=claude-fable-5; api-location=anthropic.com
