feat(provenance): govern source snapshots and data inputs

scripts/train_operator_yolo_detector.sh

@@ -53,6 +53,8 @@ if [[ -z "${PYTHON_BIN:-}" ]]; then
   fi
 fi
 
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
 DATASET_YAML="${OPERATOR_YOLO_DATASET_DIR%/}/dataset.yaml"
 SUMMARY_PATH="${TRAIN_OUTPUT_DIR%/}/${TRAIN_RUN_NAME}/training_summary.json"
 export DATASET_YAML
@@ -79,6 +81,11 @@ if [[ ! -f "${YOLO_BASE_MODEL_PATH}" ]]; then
   exit 1
 fi
 
+# A filename is not a training identity.  Verify the immutable YAML/corpus/
+# asset/review release before importing Ultralytics or allocating CUDA work.
+"${PYTHON_BIN}" "${SCRIPT_DIR}/training_release_manifest.py" verify \
+  --train-yaml "${DATASET_YAML}"
+
 mkdir -p "${TRAIN_OUTPUT_DIR}" "$(dirname "${TRAIN_MODEL_OUTPUT_PATH}")"
 
 "${PYTHON_BIN}" - <<'PY'