Versioned artifact registry

Artifact Core

A registry of versioned deliverables and a resolver for the latest good deliverable. MCP server: read-only resolvers, and audited, append-only lifecycle writes (mark_current is reversible; withdraw_version is terminal).

Baked-in rules

• Immutable versions — a version's content is never silently overwritten; a divergent rewrite = CONFLICT.
• Explicit CURRENT — the current version is designated, never guessed.
• Existence check — a withdrawn or missing deliverable is never returned as current.
• SHA-256 hash computed on the provided content and compared to the declared hash (match marked).
• Attestations, no remote reads — the connector does not read files; it logs who verified what, and when.
• Self-hashed, tamper-evident audit — self-hashed write-once entries, reproducible journal_hash (detects naive editing; not 'tamper-proof' without a server-keyed HMAC).
• Nothing is invented — missing data stays null/UNKNOWN.

MCP: /mcp · Privacy · Terms · support: infodev@mmcco.co