coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
informed-decision/docs/evidence/2026-10-11-zlib-published-verification
History
tegwick 312ab97e87 Prepare owner-reviewed zlib-only native release decision 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 12:37:05 +02:00
..
artifact-comparison.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
base-image-config.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
base-image-manifest.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
base-runtime.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
base-sbom.cdx.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
base-sbom.cdx.json.log Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
base-trivy-full.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
base-trivy-full.json.log Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
candidate-runtime.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
ci-publication-observation.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
image-config.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
image-manifest.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
installed-purpose.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
loaded-daemon-image-proof.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
publication-digest.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
published-verification.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
read_public_artifact.py Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
README.md Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
registry-proof.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
run_published_runtime.py Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
run_published_scan.py Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
runtime-comparison.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
runtime-receipt.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
sbom.cdx.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
sbom.cdx.json.log Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
scan-receipt.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
source-commit-proof.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
trivy-full.json Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
trivy-full.json.log Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00

README.md

Actual owner CI task11534/run4 succeeded at exact9b4bb25d. Independent anonymous public digest readback, full same-fresh-DB baseline/candidate scans and SBOM, exact74source hashes, directory-aware layer audit and isolated readonly/networknone runtime+10purpose variants pass. Only zlibr0→r1 changes44package SBOM; two final files differ and313directory metadata entries remain unchanged. Zero scan findings is DB snapshot scope; Alpine3.24 EOL-list coverage warning retained. Registry/daemon configuration serialization distinction and initial tooling refusal preserved. Native deployment, database/provider checks and distinct founder release approval remain unperformed. T05/risk record stay active. See published-verification.json and all raw non-filtered evidence.