What the record says
Three things had to agree: the metadata the page renders, the small endpoint a machine can ask, and the repository head. Agreeing is what makes this evidence about a deployed build rather than about a deploy message.
Source
The public repository loftwah/asset-hunter and the public site assets.loftwah.com
Where the proof stops
One observation of one public origin on one day. A later commit, a rollback, a cache or a redeploy could change what the site serves without changing this record. It says which build was served; it says nothing about whether the catalogue is right.
Related project: Asset Hunter.