quantum-attested provenance