Provenance Record

News, 783 words (range 400-1200), 4 cited sources (3-5 required). Clear lead that attributes everything to Cloudflare ('Says'), a section on what the November post says, a section on the June pledge, and a section on where the sources differ or are silent. Neutral tone; Cloudflare's rationale about AI and maintainer load is labelled as Cloudflare's own claim made without figures. Herald-derived figures are labelled as such. Internal link /article/2026-10/12-deno-team-joins-cloudflare-... resolves to an existing published article and the dated claim in it (Deno blog post dated October 9, 2026) matches that article.

Snapshots read from disk with gunzip -c and text extraction: source-0 (Cloudflare Nov 9 post, HTTP 200), source-1 (Cloudflare June 4 post, HTTP 200), source-2 (The New Stack, snapshot came from Archive.org capture 20261105143638 because the live page returns a Cloudflare bot-check 403 to curl; I re-fetched the same Archive capture with curl and the sha256 cda44945a5004457299e44f845da99092ea921e280e104613081fbba7b92d685 matches the manifest), source-3 (GitHub blob page of docs/blog/cloudflare-supports-vite.md). I also re-fetched sources 0 and 1 live with a browser User-Agent and the extracted article text is identical to the snapshots (cf-nov sha256 9970aa9c78bca570e0b41e1b4b09d7a4555b13490690ff99c7f7f75eef55b433), and read the Vite post as raw text from raw.githubusercontent.com (sha256 a4a23ddc1ff0d76aefec54daf618050d31d56a4b9743997d2f8ad7f10195a2cd; vite.dev is not allowlisted and is not cited; the GitHub source file is the cited route). suspicious_patterns is null for all four sources; no prompt-injection text found. QUOTES: all 24 quoted strings in the body were extracted by script and matched verbatim (case, punctuation, curly/straight apostrophes normalised) against the source text; 24 of 24 found. NOVEMBER POST: page metadata published_time 2026-11-09T13:00:00.000Z (visible date November 9, 2026). Verbatim sentence: 'Cloudflare is distributing the first $301,300 of the Vite Ecosystem Fund to 44 projects and maintainers across the Vite ecosystem.' so the headline repeats Cloudflare's own wording, including 'first', 'projects and maintainers' and 'distributing'. The recipient list under 'Contributions to ecosystem recipients' was recounted from the raw text: 44 names (Andrew Gallant ... Yuki Okushi), so the Herald's 'matching Cloudflare's figure' is correct. The post spells ESLint as 'ESlint'; the article does not name ESLint, lists only some names after 'including' (Babel, pnpm, PostCSS, Prettier, Rollup, Terser, typescript-eslint, Mock Service Worker, e18e), and does not claim the list is complete, so the omission is honest. 'Anthony Fu Fund' is an entry as stated. Selection by a panel of core team members from Vite, Vitest, Rolldown, Oxc, Vite+ 'including maintainers not employed by Cloudflare': verbatim. 'allocated through Cloudflare's Open Collective as a combination of contributions to recipients and stipends to core maintainers': matches. 'We'll continue to distribute and draw down the committed amount every quarter': verbatim. Stipend: 'eligible for a stipend of up to $4,000 per calendar month. Each maintainer can invoice at a rate of $50 per hour contributed that month.' Verbatim; the article's summary says 'up to $4,000 a month' (drops 'calendar', no change in meaning). Exclusion of maintainers already paid or employed for the work, with VoidZero employees as the example: verbatim. The post does not say how the $301,300 divides between contributions and stipends, gives no per-recipient amounts and no stipend-claimant count (searched all four sources: none gives them), so the article's 'None of the cited sources gives ...' is correct. 'Committed an additional $1 million ... Community Engineers Fund': matches. DERIVED FIGURES: 301,300 / 1,000,000 = 30.13% (correct, labelled Herald's own); 4,000 / 50 = 80 hours (correct, labelled Herald's arithmetic). JUNE POST: published_time 2026-06-04T12:59:00.000Z; 'Cloudflare is committing $1 million to a Vite ecosystem fund to support maintainers and contributors, administered by the Vite core team' verbatim; it says VoidZero 'is joining Cloudflare'. Its page carries an 'Acquisitions' blog tag, but the text says 'joining', which is what the article quotes. VITE POST: author 'The Vite Team', date 2026-06-04; 'Adopt a core team member stipend to support independent team members' and 'Vite's Open Collective (which stays managed by the Vite team)' verbatim. THE NEW STACK (Jun 5th, 2026, Adrian Bridgwater): 'Cloudflare ... announced its acquisition of VoidZero this week' and 'Known as an acqui-hire' versus Cloudflare and Vite 'joining'; 'The developer community is mixed on this news.' verbatim; Faulkner's 'We intend to take the same approach here, and people should hold us accountable to that' verbatim and tied to the Astro commitment; the piece repeats the pledge as 'administered by the Vite core team', so the article's statement that Cloudflare's June post 'and The New Stack's account of it' use that phrase is correct. The New Stack piece does not cover the November round (checked: no mention of $301,300, 44, stipend, Open Collective). INDEPENDENCE/FOOTER: the only disclosure in The New Stack snapshot is the footer line 'TNS owner Insight Partners is an investor in: Anthropic.' It names no relationship to Cloudflare, VoidZero or Vite, so 'independent of both companies' rests on the absence of any disclosed tie; I could not independently check Insight Partners' portfolio (web search budget exhausted), which is noted as a limit rather than a finding. Because the article does not touch Anthropic or Bun, the footer is not material to it. SOURCING BAR (News, policy 3-5 sources, no independence quota for News): 4 sources cited; 3 are first-party (Cloudflare November, Cloudflare June, Vite team) and 1 independent outlet (The New Stack), which covers the June pledge, not the November round. The article says so explicitly in its last paragraph and attributes every November fact to Cloudflare in the headline, summary, lead and body ('Says', 'The post says'). That meets the News bar: the facts are a first-party announcement, correctly framed as such. Allowlist: blog.cloudflare.com, thenewstack.io and github.com are all on config/source_allowlist.txt; no additions. Orphan check: every body URL is in article.sources and vice versa (the checklist 'body sources match' passed). Anthropic disclosure: not required - the article is not about Anthropic or an Anthropic product and does not name Anthropic or Bun; Anthropic and Bun appear only in an unused passage and the footer of The New Stack page.

Claim-accuracy tests run. (1) Absence/quantifier lines from the grep were each tested against every snapshot: 'None of the cited sources gives per-recipient amounts / the split / the number of maintainers who have claimed a stipend' holds for all four; 'None of the cited sources explains how those descriptions fit together' holds (the Vite post separates Vite's own Open Collective from the Cloudflare fund but does not say who administers the latter); 'it found no independent news report of the November round' is scoped to outlets the Herald checked and the cited independent outlet indeed does not cover it. 'first' in the headline is Cloudflare's own word. 'all'/'each' in 'each can invoice' follows the post's 'Each maintainer can invoice'. (2) Headline, summary, lead: qualifiers kept ('Says', 'up to', 'first'); actor not renamed (Cloudflare distributes, a panel selected, money flows through Cloudflare's Open Collective); no implied cause. (3) Dates: November 9 (post metadata 13:00 UTC, basis stated), June 4 (metadata 12:59 UTC), June 5 (The New Stack), October 9 (Deno post), in order and with calendar dates. (4) Derived figures recomputed (30.13%, 80 hours, 44 names) and labelled as the Herald's. Vendor figures ($301,300, $1 million, $4,000, $50) are labelled as Cloudflare's. (5) Disagreement June ('administered by the Vite core team') versus November (panel selected recipients, money flows through Cloudflare's Open Collective): both reported with attribution, not reconciled; both verified. The New Stack calling the deal an acquisition versus 'joining': reported with attribution. (6) Independence recounted per outlet: one independent outlet (The New Stack, restates the June announcement plus commenter reactions and a Cloudflare interview), described as such. No errors found.

Accurate, carefully hedged News item whose headline, summary and lead match Cloudflare's own wording; all 24 quotes verbatim, counts and derived figures correct, disagreements reported with attribution, no corrections needed. APPROVE. Featured candidacy: 1 - solid first-party funding news for JavaScript tooling maintainers, with a limited broad-audience reach and no independent coverage of the November round