abyss-machine

Route one OS Abyss artifact through owner controls, evidence/drift review, registry selection, and fail-closed consumer admission. Use before producing or consuming a concrete bundle, package, container, model/runtime, generated export, extension, or media artifact, or when provenance, SBOM/signature, source-ref, registry, or trust-gate evidence is stale or missing. Do not use for ordinary source edits/tests, generic supply-chain explanations, raw sessions, or source-authority disputes.