Can a compatibility entry for Pkg specify a commit SHA in Project.toml?

Can the [compat] section of a Project.toml file indicate compatibility with a specific commit? This does not seem to be mentioned in the documentation.

No, but Pkg supports pkg> add https://github.com/Your/Repo#commit.