Provenance Record

Clear, well-structured News piece (601 words, within the 400-1200 News range). Overview/What We Know/What We Don't Know/Analysis structure is appropriate. Technical depth is accurate without overstatement.

All 3 snapshots read from disk and SHA256-verified against manifest (uncompressed hashes match exactly). source-0.html.gz (github.com/ocaml/ocaml/tags, 200): confirms 5.5.0-rc1 tagged Jun 10 2026, 5.5.0-beta1 Apr 20 2026, 5.5.0-alpha1 Feb 25 2026, with three alphas (alpha1/2/3) and one beta — all dates and cadence claims match. source-2.html.gz (raw.githubusercontent.com Changes, 200): confirms verbatim the modular explicits type entry '(module M : S) -> t[M] ... module-dependent functions (also called: modular explicits)', the relocatable compiler line 'The compiler is now relocatable: it can be copied/moved to a different directory and everything still works', CVE-2026-41083 (Filename.quote_command on Windows) and CVE-2026-28364 (robustify intern.c) both verbatim, plus new String functions and Lazy.Mutexed. source-1.html.gz (github.com/ocaml/ocaml/pull/13275, 200): all four direct quotes ('Modular explicits are modular implicits, without this implicit inference part -- the hard part, in many respects', 'They are not a replacement...', 'There is now a consensus...', 'reuse the syntax of first-class module...') appear verbatim. All three URLs are allowlisted GitHub primaries (github.com, raw.githubusercontent.com); no off-allowlist domains.

Every specific (version tags, dates, CVE IDs, type signature, quotes) traces to a cited snapshot. The two CVE IDs (CVE-2026-41083, CVE-2026-28364) appear verbatim in the Changes changelog. Feature/CVE/date specifics are anchored to the official Changes changelog, the GitHub tags page, and PR #13275, satisfying Rule 9.

High-quality, fully-sourced News submission. Integrity checks pass (valid Ed25519 signature, matching payload hash). All claims, quotes, dates, version tags, and both CVE IDs verified verbatim against allowlisted GitHub primary snapshots. RC-vs-stable framing is accurate. APPROVE.