How to generate provenance with immutable releases?

With GitHub's new immutable releases feature, the assumption that provenance can be attached to an already-published release no longer holds. Instead, all artifacts (both builds and provenance) have to be published in one go if immutable releases are enabled.

Would be great if documentation could be updated to reflect that situation.