Provenance accounting: every commit on the branch explained exactly once
Receipts prove that a commit was validated; they do not say where it came from. Closing a pass of coding agents only when every commit on the branch has exactly one recorded origin is what keeps unexplained work out.