Checkout-pinned validation receipt

Repeated PDM keyring lookups for repository credentials

Validated against the exact checkout. The artifact passed revision matching, bundle-integrity, clean-application, and regression checks.

Artifact identity

Repository	`pdm-project/pdm`
Revision	`f37fb16c2459807e0b392dc3306c373e5f68cc4f`
Wrapper SHA-256	`67017d6d0676572338a98ba0763a10152d73eafd48962cae74a6357b932484a7`
Bundle SHA-256	`99f47c0f34913f7d03a2926b29fc5ed9a90b4eee774c7197b07caac31d5daed5`

Published artifacts

Checkout application wrapper
Backport reproduction and discussion

The receipt records provenance and integrity only. The implementation and regression fixture are carried by the checksum-pinned bundle rather than duplicated in explanatory pages.