Tagged release identity worksheet
=================================

StatMedAnalysis | Downloadable worksheet | 5 November 2026

Verify that a published archive corresponds to the exact source revision named
in a release citation.

Working instructions
Record the release label and resolve it to a full commit identifier.
Distinguish an annotated tag object from the commit it points to. Obtain the
archive via its published route and compare its contents against the release
manifest. Record any generated outputs absent from the source tree.

Working record
Save a local copy. Use public, hypothetical or aggregate information.
Project code ____________________   Prepared on ____________________

Repository and release label
___________________________________________________________________

Tag type and tag object ID when present
___________________________________________________________________

Resolved full commit ID
___________________________________________________________________

Published artifact filename and identifier
___________________________________________________________________

Build steps and generated content
___________________________________________________________________

Expected digest and trusted source of that digest
___________________________________________________________________

Observed digest and mismatched paths
___________________________________________________________________

Citation text and verification date
___________________________________________________________________

Hypothetical worked case
A fictional release has tag v1.2.0 and a separately built archive containing
rendered figures. Matching only the tag name leaves the archive unverified.
Record the commit and compare the archive to the manifest produced by the
documented build.

Decision and follow-up
Approve the citation after identifying both the source revision and distributed
artifact. Treat digest mismatches as requiring investigation. A checksum
comparison establishes byte agreement with a specified reference, while
authorship requires separate evidence.

Decision _______________________   Date ___________________________
Evidence retained at _____________________________________________
Next action ____________________   Owner __________________________

Official reference checked 5 November 2026
https://git-scm.com/docs/git-tag