{
  "status": "published-not-deployed",
  "source_commit": "be1a388a848cf59e9ff3a5420f88a70ca0a52e7e",
  "image": {
    "repository": "forgejo.coulomb.social/coulomb/approval-engine",
    "tag": "0.1.0-hfact-be1a388",
    "digest": "sha256:251941a5cb2724b57cc32cff6b693b1ab0be695bee4f56f02d51961189c0fa49",
    "linux_amd64_manifest": "sha256:a9fdac46b7a86f7d50389d551731b3dea321f47e90be66bfb8c3e498a8a544c2",
    "schema_version": 5
  },
  "scan": {
    "scanner_image": "sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969",
    "gate": "CRITICAL,HIGH; exit-code 1",
    "exit_code": 0,
    "high": 0,
    "critical": 0,
    "os": "Alpine 3.24.1",
    "warning": "Scanner does not list Alpine 3.24 in its EOL list; vulnerability detection ran.",
    "lower_severities": "not selected by the existing release gate",
    "observed_at": "2026-09-10T17:32:22Z"
  },
  "container_verification": {
    "status": "passed",
    "uid": 10001,
    "schema_version": 5,
    "store_sha256": "eb33ce55f1475e19ab25d0727bc244ffc7375ff9ae5f441d7d9a36fb293d7446",
    "checks": [
      "nonroot",
      "v4-to-v5-persistent-migration",
      "legacy-declaration-false",
      "service-agent-unknown-refusal",
      "human-bind-claim-consume",
      "restart-persistence"
    ],
    "native_identity_or_credential_calls": 0,
    "network": "none",
    "packages": {
      "approval-engine": "0.1.0",
      "PyJWT": "2.13.0",
      "cryptography": "50.0.1",
      "waitress": "3.0.2"
    }
  },
  "source_suite": {
    "passed": 152,
    "new_regressions": 22
  },
  "production_deployed": false,
  "factory_attempts": 0,
  "paid_model_calls": 0,
  "remaining_owner_records": [
    "APPROVAL-WP-0002-T01/T03/T05",
    "SECRETS-WP-0009-T03",
    "INFD-WP-0001-T07/T08",
    "AUDIT-WP-0009-T04/T06/T09"
  ],
  "log_sha256": {
    "image-build.txt": "ec1b54fedaccf618f9fe31df5c142d6db4d9612effd900c05c2134eea97a680b",
    "image-scan.txt": "e0024173a72bc9d3862ed476aefcf2224a4bd54612c3c1c6e5bb20777aa2d5d1",
    "image-push.txt": "c89bb84760614e782eab64e33c72a578f69615adf5fe8ba35778c733975f0551",
    "registry-inspect.txt": "577d321cae9c55ed7a7814b33894ecacaf066e4a7b13cb54c488b72938bae1fb",
    "release-tests.txt": "48ac9c02d5e186c834889c99c651827dcc7605e674811ba7c6522c9890d7371f",
    "deploy-dry-run.txt": "05e28400d629b0aaefad24c7f12d894ca77eb538427eb1a12c7e0e8bce5d8f32"
  },
  "registry_manifest_verified": true,
  "deployment_validation": "kubectl apply --dry-run=client: passed (6 resources); no apply",
  "verification_script": "docs/evidence/2026-09-10-human-control-image-smoke.py",
  "verification_command": "docker run --rm -i --network none --read-only --tmpfs /tmp:rw,nosuid,nodev --cap-drop ALL --security-opt no-new-privileges --entrypoint python forgejo.coulomb.social/coulomb/approval-engine@sha256:251941a5cb2724b57cc32cff6b693b1ab0be695bee4f56f02d51961189c0fa49 - < docs/evidence/2026-09-10-human-control-image-smoke.py"
}