Recorded isolated application control test. No LLM/customer production/human authentication tested.

Content check (Node24):
node verify.mjs release-evidence.json a0bce49d5da4ae0a3828cd706e4f5585f79ee574

Separate GitHub origin check:
gh attestation verify release-evidence.json --bundle attestation.jsonl --repo AGICOMPLY/AGICOMPLY --signer-workflow AGICOMPLY/AGICOMPLY/.github/workflows/supabase-runtime-validation.yml --source-ref refs/heads/main --source-digest a0bce49d5da4ae0a3828cd706e4f5585f79ee574 --deny-self-hosted-runners

Hashes and attestations do not establish general security or compliance. Review the method, source and limits.