@tao@mathstodon.xyz You could publish Git commit IDs (or cryptographic hashes more generally) as tamper-proof evidence that the repository with the work was at the level you later claim it to be.