File source kind

https://usemakoto.dev/source/file identifies an origin collected from a finite file-like byte source.

Meaning

The identifier describes the collection category only. It does not name a particular file, guarantee that a file was trustworthy, or replace the subject digest. Producers may add a redaction-safe source.uri, name, media type, retrieval time, or version when appropriate.

Integrity boundary

The origin statement's subject SHA-256 binds the exact collected bytes. A path or URI alone is not immutable identity and must never be treated as one.