refactor(jassub): [PKG-JASSUB-01] pin exact nightly and font provenance

packages/artplayer-plugin-jassub/ARCHITECTURE.md

@@ -17,20 +17,28 @@ resize is width/height/top/left/force. Keep the existing declarations until the
 type compatibility work has assessed extraction, callbacks and replacement consumers.
 Both option and instance expose extension indexes; they are existing compatibility boundaries.
 
-Provenance is incomplete. The wrapper matches upstream jassub 1.8.8 apart from formatting and
-the ESLint header; worker JS and default font match that archive byte-for-byte. Local WASM
-files validate but differ from its build. Other font metadata includes different source and
-license clues; do not infer redistribution rights from family names or embedding flags.
-Task PKG-JASSUB-01 and VENDOR-04/05 remain open. Full original acquisition history is unknown.
+The wrapper matches upstream jassub 1.8.8 apart from formatting and the ESLint header;
+worker JS and default font match that archive byte-for-byte. Local WASM instead matches
+the exact Pages nightly blobs associated with source 6b19a04ddfbad8f9bfd3237395788dd76218841b.
+Its build workflow and seven submodule revisions are pinned in the separate
+refactor/baselines/jassub-provenance.json supplement. All 11 demo font blobs also match
+the historical Pages tree. Do not replace the binaries just to match the npm version.
+The build has not been independently reproduced. Complete component/open-font notices
+and six unclear font redistribution permissions remain VENDOR-04/05 gates in
+PKG-JASSUB-06 / SITE-01. Source identity permits owned adapter work to proceed after 01;
+it does not authorize redistribution or prove original acquisition history.
 
 Use the pinned Node/Yarn toolchain:
 
 ```sh
 yarn test:jassub
+node refactor/scripts/jassub-provenance.test.mjs --network
 yarn build artplayer-plugin-jassub
 ```
 
 The baseline runner verifies both actual published packages and frozen workspace inputs.
+Provenance tests are offline by default; explicit --network refreshes pinned source and
+asset comparisons and fails on any request error, without substituting cached evidence.
 Set ARTPLAYER_JASSUB_CANDIDATE=1 for current source behavior; ARTPLAYER_JASSUB_ARTIFACT can point
 at a main/legacy artifact. Tests use controlled DOM, Worker and SIMD detection, with actual
 vendor JavaScript. They do not render ASS or execute worker WASM. Real browser, failures,