Validation
Refresh runs record source identity, retrieval time, artifact hash, record count, schema version, quality checks, and a bounded failure class.
Venue Authority trust center
Refresh validation and last-known-good behavior
A failed source refresh does not replace a validated serving snapshot.
Serving behavior
A candidate snapshot becomes serving only after validation. If a refresh fails or stalls, the previous validated snapshot remains available while status reports the stale attempt.
Publication rights
Data freshness and publication permission are separate controls. A fresh snapshot cannot serve through a channel whose rights evidence is revoked, unclear, changed, or stale.