Development record

09-provenance-substrate.md:18-21 says licence detection is 'implemented by internal/core/provenance detect_licence' and reads Cargo.toml and pyproject.toml; the detector is memory.detectLicence (internal/core/memory/provenance.go:308), internal/core/provenance is the disclosure vocabulary, and the code says TOML manifests are not parsed (provenance.go:305)