dsh-support-lifecycle-proof

Offline deterministic verifier for a supplied release support-window and retirement manifest. It checks hashes, release bindings, support/retirement chronology, reviewer diversity, receipt uniqueness, freshness, and an explicit zero-unsupported closure.

It does not scan compatibility, query deployments, announce end-of-life, perform retirement, authenticate receipt issuers, prove inventory completeness, or provide operational/legal advice. Reports are redacted, content-addressed, and only written below an explicit artifact directory.