Publisher workspace
The server validates bytes statically and never runs publisher code.
The manifest identifies every immutable provider artifact. Only exact SHA-256 bytes are accepted.