`provenance.originEvidence.entityProvenanceUrl` records the official US-entity evidence for the stewarding organization.
`provenance.originEvidence.officialReleaseChannelUrl` must mirror the catalog source URL for the exact release page.
`provenance.originEvidence.licenseUrl` links the license terms the catalog is relying on.
`runtimeSupport[*].actionUrl` stores the reviewed download or install path for each tracked local runtime, and at least one US runtime path must be directly downloadable.
`runtimeSupport[*].verification.lastVerifiedAt` records when that runtime path was last rechecked.
`runtimeSupport[*].verification.checks[*].target` records whether the evidence is a compatibility review or a distribution review.
`runtimeSupport[*].verification.checks[*].sourceUrl` points to the exact reviewed runtime page, and `caveat` stores any constraints that need to stay visible.
When a runtime page is a catalog or guide rather than the raw artifact, the drift check also derives the tracked download path from the reviewed runtime command.
`lastVerifiedAt` is the reviewer timestamp carried by each entry and reused by the freshness window.