policy-nexus/docs/evidence/2026-10-11-runtime-release-verification/published/published-verification.json
tegwick 645d5af213 Record verified published runtime and complete policy history candidate
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 03:01:29 +02:00

101 lines
4.4 KiB
JSON

{
"image_digest": "sha256:4e0db6a57eb00f577159aa6ee10f910dd67b03fd0541c6ce849f5426fdb99d06",
"policy_revision": "b64a0c52ec1ea8d1efa99dd7f870e580d7c60df8",
"publication_manifest_digest": "ba53cc4900e6bb9ab8aa4bac4e58cb5fe7a03d656bafb3f9cb3d9c8ebff7843a",
"source_inventory_digest": "40d9e8852fe4c9e75b71f371d0fdae38664b068e7498711b0ac5671d0f41efb5",
"source_set_digest": "15bda2e332285afc862df8974cf29de403737df5073fa362adfc6d203cf2f256",
"documents": 73,
"installed_site_files": 183,
"source_revisions": {
"access-engine": "f5fad7c2851708be41c82891430deffe5f4af0ac",
"activity-core": "fd84f2b6518ff17509930499099ec2a6692d088c",
"artifact-store": "94541a29e2758ea5da86a41f4d2016c6ef98d026",
"binect-js": "d128f03a700bd9a5f6e6a6e3b3f68fa07d597243",
"coulomb-loop": "d07455fbacd3e125e1ba6d991041c811b5c353d2",
"coulomb-social": "1af71a4f61f80b4c58d30cad2cc0ccd5cc02979f",
"evidence-binder": "4f115e38b84960038df92b5755cc33387fdec574",
"glas-harness": "5ce4f38aedfd27cc783131f18480df02e2951514",
"kaizen-agentic": "894d34c466eb7f949e136fbeca4fcf201cdb1086",
"key-cape": "f97f006edef72a8a4dec2fc47c1097ab9642774a",
"markitect-main": "9fbfe76ebb43ff84358d2f2a36ca6b958431e22d",
"net-kingdom": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"ops-warden": "eaabb4216186f4fee2d830376a381740b140087c",
"policy-nexus": "b64a0c52ec1ea8d1efa99dd7f870e580d7c60df8",
"railiance-hosts": "53344177f3de1d0a417504e798b80c1d89798867",
"railiance-infra": "ef64e324b61e9aa9b9ed03aad7dd2101915057ca",
"railiance-master": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"railiance-platform": "8c152d012a44664f51969f2cb3456e28a3a0e5ff",
"rapp-postgres": "03744030c9258e920f6403a9ce184a26d7b75268",
"rein-aharness": "c2471657605a61e8c62469b619bbc822baea945c",
"risk-nexus": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"state-hub": "cccc27ce44928e579627aa86ccee38ae4fb1ca10",
"target-revenue": "a3a8a27a8cda32ae3c7b55353ee16a131c50a0a0",
"the-custodian": "dcdec162d61398f0def4990957455d45a74a1b01"
},
"source_lock_digest": "99c695f46a54ead4cfe8f560f3648bf4db19404fe198b156c740115c97d3ed40",
"source_lock_observed": true,
"image_executed": true,
"registry_credentials_persisted": false,
"record_type": "verified-published-release-candidate",
"workplan": "PNEX-WP-0005",
"ci": {
"id": 11467,
"run_number": 78,
"head_sha": "b64a0c52ec1ea8d1efa99dd7f870e580d7c60df8",
"status": "success",
"url": "https://forgejo.coulomb.social/coulomb/policy-nexus/actions/runs/78",
"created_at": "2026-10-11T00:48:37Z",
"updated_at": "2026-10-11T00:50:05Z",
"owner_tests": {
"passed": 52,
"environment": "POLICY_NEXUS_SOURCE_ROOT=/workspace/_sources",
"independent_local": true
},
"prior_trials": [
{
"task_id": 11461,
"run": 76,
"source": "6d2c7eef779c823731e6f793b3adcf44afddd183",
"outcome": "failure, inherited fixture source-root"
},
{
"task_id": 11466,
"run": 77,
"source": "65862b1e0c6eaa4c96e1e48131db2ac7e914eb36",
"image": "sha256:b955359f68ccd98ca6e906ef57b74c9bd6e732083b9e2b6857a358cd5196f9a1",
"outcome": "source/history passed; runtime159 fixable findings incl2critical39high"
}
]
},
"independent_source_hashes": 73,
"immutable_http_hashes": 72,
"current_http_hashes": 73,
"native_runtime_user": "uid=101(nginx) gid=101(nginx) groups=101(nginx)",
"read_only_root": true,
"nginx_config_check": "passed",
"scanner_image": "aquasec/trivy@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969",
"scanned_packages": 70,
"scan_counts": {
"CRITICAL": 0,
"HIGH": 0,
"MEDIUM": 0,
"LOW": 0,
"UNKNOWN": 0
},
"findings_suppressed": false,
"db_metadata": {
"Version": 2,
"NextUpdate": "2026-10-11T18:59:50.889010572Z",
"UpdatedAt": "2026-10-10T18:59:50.889010923Z",
"DownloadedAt": "2026-10-10T23:32:32.380033131Z"
},
"eol_warning": "Alpine3.24 absent from bundled EOL list; vulnerability detector scanned70packages, raw official base found2 vulnerabilities before explicit fixes",
"original_source_lock_observed": true,
"source_lock_exact_serializer_matches": true,
"source_lock_config_matches_exact_source": true,
"hosting_changed": false,
"new_native_approval_inferred": false,
"local_candidate_container_executed": true,
"native_hosting_changed": false,
"registry_layer_readback_executed_image": false
}