Returns the reference governance manifest after a full integrity verification (schema gate + per-file SHA-256 + label match): the bundled version, schema_version, upstream provenance (repository, pinned commit and tag, source URL), license (BSD-2-Clause Alexandrov-lab mirror, with the documented legal-ambiguity note), citations, and per-file records (class, build, build_independent, availability, sha256, size, channel and signature labels).