AgentPROV corpus: SENTRY on AgentDojo (AGPL-3.0-only)

An execution-provenance corpus built by AgentPROV v0.1.0 from the SENTRY AgentDojo run logs (AGPL-3.0-only): each execution as an AgentPROV Execution Record, semantic annotations and W3C PROV bundles, validated and hash-chained. Each copyleft source is its own corpus and record, under the source's licence (D-94). This deposit draft holds 1 AgentPROV corpus version(s), prepared offline by agentprov package --deposit for the release date 2026-10-30. Nothing has been uploaded or published. Corpus sentry-agentdojo 0.1.0: SENTRY: AgentDojo 0.1.35 trajectories of OpenRouter-served agents for a post-hoc monitor (vinhqdang/SENTRY). 674 execution records, of which 0 are outcome-only records. Licence class: AGPL-3.0-only; restrictions: "AGPL-3.0: a corpus holding these logs is conveyed under the AGPL-3.0 (corresponding source, the same licence for derived works); kept in its own corpus (D-94)". Content digest sha256:3e35d5218f2ca41e64e8da5225046d5149e33735c45616a9f36d39917e136d3e; root digest sha256:d19cf1f753550086f9feb3a5a6e2a83d2ba04d4fc05eced735506fd80aa018e3. Counts are computed from each corpus manifest at sealing. Each DATASHEET states what the records do and do not establish; a statement about the data is scoped as it is there. To verify: compare each archive's sha256 or md5 with DEPOSIT-MANIFEST.json, run agentprov verify on the archives (archive mode, no extraction; H.5.5), and compare each root digest with the one published outside the deposit (the corpus tag annotation and the paper).