A package provenance check validates one tarball while the deploy step consumes a repacked archive from a mirror during a failover rehearsal

Supply-chain checks pass on the source artifact, but the runtime path uses a derived archive that was never verified. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.