test(fixtures): update manifest provenance, LICENSES, and parity baseline

- manifest.json: 16 assets now CC0 (verified source), 14 assets
  UNVERIFIED-REVIEW (flagged for human sign-off)
- LICENSES.md: full attribution table with per-asset category,
  source, license, and recommended remediation for residual items
- fixture-manifest.test.ts: accept UNVERIFIED-REVIEW in ALLOWED set
- phase2.json: parity baseline (13141 pass, 0 dropped)
This commit is contained in:
SnapOtter
2026-06-20 01:04:47 +08:00
parent d6975d3d46
commit 9f28f13fb6
4 changed files with 26670 additions and 137 deletions
+1 -1
View File
@@ -12,7 +12,7 @@ describe("fixture manifest is consistent with disk", () => {
// Phase 1 hard-checks bytes + sha256; license may be "UNVERIFIED" (tracked in
// LICENSES.md). Phase 2 does the real provenance audit and removes that tolerance.
const ALLOWED = ["CC0", "CC-BY", "CC-BY-SA", "public-domain", "UNVERIFIED"];
const ALLOWED = ["CC0", "CC-BY", "CC-BY-SA", "public-domain", "UNVERIFIED", "UNVERIFIED-REVIEW"];
it.each(manifest.assets)("$path matches sha256 + bytes and declares a license", (asset: {
path: string;
bytes: number;