Contract-first control over LLM-generated code — provenance graphs, derived tests, and an honesty protocol.