Provenance register
A record linking assertions about a component or artifact to sources, origin, transformations, ownership, and custody. Provenance supports auditability but does not alone prove authenticity or integrity; signatures, verification, controls, and evidence quality remain necessary.