Provider truth about which artifact is serving a deployment's hostname right
now, and which fleet specification that artifact was built from.
physicalScriptName is the script traffic ACTUALLY reaches, which is not
necessarily the release the control plane expected — reporting the difference
is the whole point. observedAt comes from the backend's injected clock, so
a caller comparing two attestations is comparing one clock, not two.
Provider truth about which artifact is serving a deployment's hostname right now, and which fleet specification that artifact was built from.
physicalScriptNameis the script traffic ACTUALLY reaches, which is not necessarily the release the control plane expected — reporting the difference is the whole point.observedAtcomes from the backend's injected clock, so a caller comparing two attestations is comparing one clock, not two.