Verify reproducible release artifacts and map acceptance evidence

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e6f0-a6f6-7b93-9124-55ef584930e2
This commit is contained in:
tegwick 2026-09-28 10:22:52 +02:00
parent c976c9c277
commit c29bf39b5d
13 changed files with 577 additions and 3 deletions

View file

@ -0,0 +1,73 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "PyJWT",
"purl": "pkg:pypi/pyjwt@2.14.0",
"type": "library",
"version": "2.14.0"
},
{
"name": "attrs",
"purl": "pkg:pypi/attrs@26.1.0",
"type": "library",
"version": "26.1.0"
},
{
"name": "cffi",
"purl": "pkg:pypi/cffi@2.1.1",
"type": "library",
"version": "2.1.1"
},
{
"name": "cryptography",
"purl": "pkg:pypi/cryptography@50.0.1",
"type": "library",
"version": "50.0.1"
},
{
"name": "jsonschema",
"purl": "pkg:pypi/jsonschema@4.26.0",
"type": "library",
"version": "4.26.0"
},
{
"name": "jsonschema-specifications",
"purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
"type": "library",
"version": "2025.9.1"
},
{
"name": "pycparser",
"purl": "pkg:pypi/pycparser@3.0",
"type": "library",
"version": "3.0"
},
{
"name": "railiance-clock",
"purl": "pkg:pypi/railiance-clock@0.1.0",
"type": "library",
"version": "0.1.0"
},
{
"name": "referencing",
"purl": "pkg:pypi/referencing@0.37.0",
"type": "library",
"version": "0.37.0"
},
{
"name": "rpds-py",
"purl": "pkg:pypi/rpds-py@2026.6.3",
"type": "library",
"version": "2026.6.3"
},
{
"name": "typing_extensions",
"purl": "pkg:pypi/typing-extensions@4.16.0",
"type": "library",
"version": "4.16.0"
}
],
"specVersion": "1.5",
"version": 1
}

View file

@ -0,0 +1,127 @@
{
"build_requirements_sha256": "ff153e73ea3a33c7d33858be50eda03943c5ef5e2706477a90ca76d250878adb",
"build_tools": [
[
"hatchling",
"1.32.4"
],
[
"packaging",
"26.3"
],
[
"pathspec",
"1.1.1"
],
[
"pluggy",
"1.6.0"
],
[
"tomlkit",
"0.15.1"
],
[
"trove-classifiers",
"2026.9.21.13"
]
],
"byte_identical": true,
"checkout_build": {
"railiance_clock-0.1.0-py3-none-any.whl": "7a4790efc97f19b69e942ae1f91a09b1b2a3b22ceca68e41ea4e45655848e420",
"railiance_clock-0.1.0.tar.gz": "cc23505334fbe7a29c5892d52db50883f62082c3885b1e61b559b6b0f5f0d12f"
},
"independent_builds": [
{
"railiance_clock-0.1.0-py3-none-any.whl": "7a4790efc97f19b69e942ae1f91a09b1b2a3b22ceca68e41ea4e45655848e420",
"railiance_clock-0.1.0.tar.gz": "cc23505334fbe7a29c5892d52db50883f62082c3885b1e61b559b6b0f5f0d12f"
},
{
"railiance_clock-0.1.0-py3-none-any.whl": "7a4790efc97f19b69e942ae1f91a09b1b2a3b22ceca68e41ea4e45655848e420",
"railiance_clock-0.1.0.tar.gz": "cc23505334fbe7a29c5892d52db50883f62082c3885b1e61b559b6b0f5f0d12f"
}
],
"limits": "Local Linux build/install evidence; no native UTC, security admission, vulnerability audit or cross-platform reproducibility claim.",
"platform": "Linux/x86_64",
"python": "3.12.3",
"runtime_lock_sha256": "fe4b4ab7fb1740648a13ff87d028914d94e4c793bb5957830e776a878c9adbb9",
"sbom_sha256": "69b45bf19e94e485d08e7af238f2aa3e3fa4f3969d8a552fcf874a12aa1eb07d",
"smoke": {
"checks": [
"installed_import",
"three_packaged_schemas",
"cli_help",
"signed_http_cli_read",
"wrong_key_refusal",
"unhealthy_cli_refusal"
],
"distributions": [
[
"PyJWT",
"2.14.0"
],
[
"attrs",
"26.1.0"
],
[
"cffi",
"2.1.1"
],
[
"cryptography",
"50.0.1"
],
[
"jsonschema",
"4.26.0"
],
[
"jsonschema-specifications",
"2025.9.1"
],
[
"pycparser",
"3.0"
],
[
"railiance-clock",
"0.1.0"
],
[
"referencing",
"0.37.0"
],
[
"rpds-py",
"2026.6.3"
],
[
"typing_extensions",
"4.16.0"
]
]
},
"smoke_script_sha256": "cdb3adb57a68f95d8fd6878195d0ee7dd7a0a00060bacc2a3f95073e6c0b27ec",
"source_base_commit": "c976c9c277033e9fca384b9e9fcd5d79ff776d43",
"source_date_epoch": "315532800",
"source_inputs_sha256": {
".gitignore": "74e4a2bdd348ce27bd64fbafbc09bef61433a821df2f23c726b062ead4896ebf",
"README.md": "c544450bc755e5743bac961fd3832f20ec4d9f86ec3562ca4a2d734a2d694a3e",
"pyproject.toml": "11a3e79fcd7b2929137ebad31647c839edc40572958b08b95f08b0605482416d",
"src/railiance_clock/__init__.py": "7c9c93a7d6bee6c68da5c19055c899d84040ecd5186169441f3a4d24d12c45c4",
"src/railiance_clock/admission.py": "afbea12a31e8ac6bea002a4d0477564d76698b633e88edeb0d2f60c582b5fc47",
"src/railiance_clock/attribution.py": "6cc6a5603295bda8fed47c5b144bdec1c6faff8b27acc440a65b81eb376415bd",
"src/railiance_clock/authority.py": "9a7ba85d17d70aeaad86cbb850b36515b7a82aef085799591bdfdf410cd023ee",
"src/railiance_clock/cli.py": "8ed77836cbdd823b86de849f76f228355bf47fcbfbbc572e22e6e48662929b59",
"src/railiance_clock/client.py": "34401db8cecf76a791013b383f9dc6bd56c0478472fe222f86b2be93505ac00f",
"src/railiance_clock/core.py": "32ac078f8729533dbbee15166cd6e450cd8638d178294304c1c60665d536b9a1",
"src/railiance_clock/health.py": "366e725eaf68d88df3a236d1f71bde5e5b7f24846932041fbaa46182e88d0f07",
"src/railiance_clock/protocol.py": "d076bfd0482d553e1c57133e7ab532c8360db3c100f164404a7c44211c3290a2",
"src/railiance_clock/schemas/protected-header-v0.1.schema.json": "15de9f38e61b49677479b431c3ef7e37a674e4b817ef8f78a19bc8fc47bbf4f8",
"src/railiance_clock/schemas/time-request-v0.1.schema.json": "c5a122b1f1f48872a25fffa5950e60dddd585e87a4da502fc4e873a44ae60f4c",
"src/railiance_clock/schemas/time-sample-v0.1.schema.json": "97e026520fff98c7140b8a91b9332ffcba22fd5d509fa983057c7cac6e6aa2d2"
},
"uv": "uv 0.5.9",
"verifier_sha256": "f3eb2a489ddf32bca164a78c0b3c22358bf45703bcd6d0572413353c1875fb81"
}