A release promotion succeeds but provenance attestation is missing

A team adopts provenance generation and later finds production artifacts cannot be tied back to a verifiable attestation in the release pipeline.