Class ProvenanceApi

Derive the author of a content path — the original author (the earliest authoring row). null for engine / unauthored paths. The producer credit router's routing seam.

The raw, per-path authoring-log reader — the unscored substrate seam.

Record one authoring act for path (append-only). The author is NOT a parameter — it is derived from the dispatched execution context inside the logic (ExecutionContextApi.getActingAuthor), so it cannot be spoofed. The write is gated to the template save chokepoint (TemplateLogic): every legitimate authoring path — the in-world authoring verbs and the REST CMS — funnels through TemplateApi.saveTemplate, so that is the single, centralized writer of provenance; nothing else may append a row. No-op without an active connection or an attributable context.

Gated to the authoring-transport singletons: TemplateLogic (/obj/api/template) — the template chokepoint every template authoring path (in-world verbs + the REST CMS) funnels through — and DocumentLogic (/obj/api/document) — the path-addressed document store (scripts and any other owned-JSON kind), a legitimately separate authoring transport (stored documents aren't templates). Each records authoring for its own paths (template paths vs /home/…//domain/… document paths); the chokepoint guarantee per kind is preserved. Nothing else may append a row.