Redacted excerpt; full evidence withheld. $ pwd && id -u && python3 --version && rg --files -g 'README*' -g 'pyproject.toml' -g 'requirements*.txt' -g 'package.json' -g 'Cargo.toml' -g 'go.mod' -g '.github/workflows/**' -g 'Makefile' -g 'Dockerfile' | head -80 && sed -n '1,240p' README.md exit: 0 d. Every release artifact carries a PEP 740 attestation and SLSA build provenance; [SECURITY.md](https://github.com/causaldyn/causal-hybrid-control/blob/main/SECURITY.md) says how to verify one. ## How it compares DoWhy and EconML estimate effects; Meridian, PyMC-Marketing and Robyn model media; do-mpc and d3rlpy plan or learn a policy on a model you trust. `chc` works at the seam between them: from a confounded log to a schedule and its certificate, in one place. It composes ideas that exist — hybrid [excerpt truncated]