Versioned, CORS-open assets shared by the Aireon suite. Stable shell entry points are revalidated; versioned release bytes remain immutable. See the aireon-static repository for the release, promotion, rollback, provenance, and adoption-ledger contracts.
The V1 user-menu runtime is append-only. Release 1.0.0 was built from @aireon/shared commit 194bad9dabff5e6661452fb35f6d4b0aad742fbc with SRI sha384-Mf76KRBUviG3JGdWKPKPUayX7+xW6JSMt25idBwoRw+gmO8Y6ohliM/m5SmBaQG9. Promotion and rollback replace only the atomically generated stable manifest.
Suite maintainers own the revalidated, no-user-data adoption ledger. It records only app ID, production URL, adapter kind, contract major, and adoption PR; immutable runtime releases never contain application account data.