It seems like "artifact provenance" or something would have been a better term. Is this related to SLSA?
I think provenance would be misleading in this context, since it’s mostly a side effect of the intended behavior (i.e., publishing without needing to manually configure a shared credential).