Technique · Supply chain

Lockfile consistency

Fails when the lockfile no longer matches the manifest, so CI installs exactly what was reviewed.

Sub-techniques

Frozen install V1016.001

Install with the frozen or locked flag so a stale lockfile fails.
Lock check V1016.002

Regenerate the lock and fail on any diff.