[codex] add manifest verifier

.github/dependabot.yml

@@ -19,9 +19,9 @@ updates:
         patterns:
           - "*"
 
-  # Cargo workspace root: core `ordvec` + the `ordvec-python` binding member
-  # (single workspace Cargo.lock). Group minor+patch into one PR; majors stay
-  # separate for manual review.
+  # Cargo workspace root: core `ordvec`, C ABI, Python binding, and repo-local
+  # manifest verifier (single workspace Cargo.lock). Group minor+patch into one
+  # PR; majors stay separate for manual review.
   - package-ecosystem: "cargo"
     directory: "/"
     schedule:

.github/workflows/ci.yml

@@ -94,6 +94,33 @@ jobs:
       - name: cargo clippy -p ordvec-ffi
         run: cargo clippy -p ordvec-ffi --all-targets -- -D warnings
 
+  # ----------------------------------------------------------------------
+  # Repo-local manifest verifier. Kept out of default-members so the core
+  # crate's default no-system-deps contract stays unchanged; this explicit lane
+  # covers its no-default-features surface, optional SQLite support, and clippy.
+  # ----------------------------------------------------------------------
+  manifest:
+    name: manifest verifier
+    runs-on: ubuntu-latest
+    steps:
+      - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (2026-03-27)
+        with:
+          toolchain: stable
+          components: clippy
+      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - name: cargo test -p ordvec-manifest --no-default-features
+        run: cargo test -p ordvec-manifest --no-default-features
+      - name: cargo test -p ordvec-manifest --all-features
+        run: cargo test -p ordvec-manifest --all-features
+      - name: cargo clippy -p ordvec-manifest
+        run: cargo clippy -p ordvec-manifest --all-targets --all-features -- -D warnings
+
   # ----------------------------------------------------------------------
   # Repo-local Go wrapper over the C ABI. Build the release static library
   # first because the cgo wrapper links the source-tree archive directly.

CHANGELOG.md

@@ -7,11 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Added `probe_index_metadata` to inspect persisted `Rank`, `RankQuant`,
+  `Bitmap`, and `SignBitmap` headers without allocating payloads.
+- Added the repo-local, publish=false `ordvec-manifest` crate with a strict v1
+  JSON schema, artifact and row-identity verification, attestation shape
+  checks, a CLI, and optional SQLite cache/audit support with one active
+  manifest pointer.
+- Added optional typed calibration profile references to the v1 manifest
+  schema, with path/hash/identity/compatibility verification but no statistical
+  computation.
+
 ### Documentation
 
 - Reframed bitmap-overlap docs around the checked Lean proof spine: query
   symmetry, quotient sufficiency, finite threshold optimality, and idealized
   hypergeometric calibration, while preserving the real-encoder caveats.
+- Documented sidecar manifest verification as a pre-load provenance check that
+  does not sign, manage keys, call networks, or decide trust policy.
 
 ## [0.2.0] - 2026-05-26