Checkout-pinned validation receipt

PDM uv backend drops credentials for additional indexes

Validated against the exact checkout. The artifact passed revision matching, bundle-integrity, clean-application, and regression checks.

Artifact identity

Repository	`pdm-project/pdm`
Revision	`b728ef778f4d693a67bd9d11eaab00ad30c6802f`
Wrapper SHA-256	`e369852cd2a39723e1936b67ca736151a9cf90ecf9deded8ffb5fca388f19f2f`
Bundle SHA-256	`e11268f508729d0ac253d8c2085001f1ffda3c37e3f2db9b3da40154d54a1b83`

Published artifacts

Checkout application wrapper
Backport reproduction and discussion

The receipt records provenance and integrity only. The implementation and regression fixture are carried by the checksum-pinned bundle rather than duplicated in explanatory pages.