# Oryseal build identity

Every emitted site build includes `/build-manifest.json`. The manifest records the source commit, source tree, selected tool versions, registry hashes, and hashes for emitted assets.

The manifest identifies a specific artifact and makes accidental drift easier to detect. It does not replace browser testing, cryptographic review, or device-specific validation.

See `/security/build` for the human-readable explanation.