Reject stale native runtime build provenance before release staging

docs/ROADMAP.md

@@ -119,6 +119,9 @@ release. Keep their evidence and unchecked production gates intact.
   modifying staged resources; corrupted/missing assets preserve existing worker.
 - [x] Transactional resource staging, verified copied bytes, process locking,
   interrupted-copy/swap recovery and backup preservation on failed rollback.
+- [x] Normal Windows/Linux source-build provenance gate before staging and
+  archive preparation; stale inventories preserve existing resources/packages.
+  Actual normal builds verified. See [runtime provenance](RUNTIME-PROVENANCE.md).
 - [ ] Verify power-loss durability and release-tool interaction with resource
   directory swaps on each OS; fault-injected process interruption is narrower.
 - [x] Shared monotonic Basic/Debug search metrics, granular bounded engine traces,