Observed. Frozen. Byte-reperformed.
Product-control explanation. Hardened market-rule cores now require the canonical public asset observed at admission time to be retained and byte-verified before a production source admission can be used in Receipt v7.
What is checked
Canonical source ID, effective date, observed asset SHA-256 and the SHA-256 of the retained local public-source object must agree. Current hardened cores are MISO BPM 015, PJM M14H and ERCOT Planning Guide Section 5.
Regression evidence
The retained-object regression currently detects 6 of 6 registered corruptions with 0 of 3 clean controls falsely flagged. This is a deterministic regression corpus, not a statistical accuracy claim.
What this does not prove
An unsigned hash is not a publisher signature. This control does not prove who published or downloaded the file, establish custody/non-repudiation, authenticate private facility/project evidence, or make legal/credit conclusions.