Does Vercel support exact Function artifact attestation?

Hello Vercel team and community,

I'm evaluating a security architecture for a payment-processing application hosted on Vercel.

The proposed architecture uses a separately governed service responsible for issuing payment-provider Checkout Sessions. The application frontend and ordinary deployment pipeline would be treated as untrusted request initiators.

I'm trying to determine whether Vercel offers a supported mechanism for an external authorization service to independently verify the exact approved Function artifact executing at the time a privileged operation is requested.

Specifically:

Can Vercel's workload identity mechanisms attest the final deployed/executing Function artifact, including relevant dependencies and configuration, rather than only identifying a project, environment, or deployment?
Can an external credential broker use that evidence to deny credential access to modified, historical, Preview, or otherwise unapproved Function revisions?
If standard Vercel OIDC claims are insufficient for this requirement, is there another supported Vercel mechanism or recommended architecture?
Are there documented limitations concerning Function instances, regional execution, artifact substitutions, token replay, or credential reuse that should inform this design?

I'm aware that Vercel supports OIDC Federation. My question is specifically about the distinction between deployment identity and independently verifiable executable identity.

I'm looking for a supported platform capability or a documented limitation, not reporting a vulnerability.

Thank you for any guidance or references to relevant Vercel engineering documentation.

Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team.

Please submit your report here: vercel.com/abuse

Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.

Thank you for the response.

To clarify, I'm not reporting a vulnerability, exploit, abuse incident, or security concern involving an existing Vercel deployment.

This is a technical architecture and platform-capability question about whether Vercel supports independently verifiable Function artifact attestation beyond the identity claims available through OIDC Federation.

Vercel Support specifically directed me to the Community for this type of architectural inquiry.

Could a Vercel engineer or knowledgeable community member clarify whether this capability is supported, unsupported, or requires an alternative architecture?

Documentation or technical guidance would be greatly appreciated.

Thank you!