Add verified file size and checksum evidence

README.md

@@ -10,7 +10,7 @@ requirement: "diffusion_pytorch_model.safetensors"
 record_id: "pseudotools/controlnet-diffusion-pytorch-model"
 provenance:
   download_url: "https://huggingface.co/pseudotools/controlnet-diffusion-pytorch-model/resolve/main/diffusion_pytorch_model.safetensors?download=true"
-  size_bytes: null
+  size_bytes: 2502139136
   license_id: null
   license_url: null
   attribution_name: null
@@ -18,7 +18,7 @@ provenance:
   reviewer: null
   reviewed_at: null
   license_findings: null
-  evidence: null
+  evidence: "Repository file record (identity, size, and checksum): https://huggingface.co/pseudotools/controlnet-diffusion-pytorch-model/blob/main/diffusion_pytorch_model.safetensors; SHA256: c8127be9f174101ebdafee9964d856b49b634435cf6daa396d3f593cf0bbbb05; Xet hash: 6e554eb82332833eeb5e6d083a40c2e71a539acae636225f9e165ec2c1b27a2a."
   rationale: null
   risk_severity: -1
   evidence_completeness: -1
@@ -29,6 +29,6 @@ provenance:
 ## License Findings
 **In progress.** License terms, permitted use, redistribution, and attribution requirements have not yet been verified.
 ## Evidence
-**In progress.** Source, licensing, lineage, and training-data evidence is being collected.
+**Verified repository facts.** The model card metadata records the repository-local file URL, exact byte size, SHA-256 checksum, and Xet hash. License, attribution, lineage, and training-data evidence are still being collected.
 ## Rationale
 **In progress.** No risk severity will be assigned until the required evidence review is complete.