A supply-chain attestation verifies on hosted runners and fails on one self...

The build is successful, yet the generated provenance document differs subtly because numeric serialization changes under one locale.