Drop a file to check whether it carries a valid Sentinel provenance receipt. A governed result is a cryptographic fact. Anything forensic is a weak signal, not a verdict — absence of a receipt is not proof of anything.
The file never leaves as a stored copy — only its hash and structure are read.