feat(provenance): govern source snapshots and data inputs

backend/tests/test_sprint129_operator_yolo_training_dataset.py

@@ -75,5 +75,7 @@ def test_operator_yolo_train_smoke_script_contract() -> None:
     assert '"dataset_summary_sha256"' in script
     assert '"base_model_sha256"' in script
     assert '"trained_model_sha256"' in script
+    assert "training_release_manifest.py" in script
+    assert "verify" in script
     assert "download" not in script.lower()
     assert "fixture_mode" not in script