SEO / GEO 工作自动化部署与实践规范（三十七）：Software Supply Chain / Artifact Identity / SBOM / Provenance / SLSA / Dependency Trust / Signed Build / Admission Control / Runtime Attestation——让生产系统只运行被批准、可验证、未被替换的软件
从 Agent Identity 与 End-to-End Causality 继续进入 Software Supply Chain、Artifact Identity、SBOM、Provenance、SLSA、Dependency T…