{"files":[{"digest":{"sha256":"6cf63d87586c7c25c3ab8e62eef5c75bbaa982b0a6f9c00c59e2720255aac9ec"},"path":"LICENSE"},{"digest":{"sha256":"c445b48109afe09c49345579053eaa3e7d7eb28a73c3320a2fb40bec24d8e8c3"},"path":"README.md"},{"digest":{"sha256":"ea2814f205cc657297e8e6acf3bc63c36148435e9fc6897b80230970a539d1dc"},"path":"demos/end-to-end/README.md"},{"digest":{"sha256":"4e90181e7f75ccdf0e4d81c83d281f53806bed241787cdc751e22b2d4cd19919"},"path":"demos/end-to-end/fixtures/customers.raw.json"},{"digest":{"sha256":"655e72bb3de8d469f1f82d65b8c70814c2b5924c7a4b247fb4ed0f5995d036ca"},"path":"demos/end-to-end/fixtures/final-extensions.json"},{"digest":{"sha256":"421e19cf002aa25cf6f2f9ed788e04c9badfd9cbc6b00030b0b089810b2ae4f8"},"path":"demos/end-to-end/generated/data/customers.normalized.json"},{"digest":{"sha256":"ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"},"path":"demos/end-to-end/generated/data/customers.public.json"},{"digest":{"sha256":"4e90181e7f75ccdf0e4d81c83d281f53806bed241787cdc751e22b2d4cd19919"},"path":"demos/end-to-end/generated/data/customers.raw.json"},{"digest":{"sha256":"eada72f4d00df064c631efab1f3af6b48fc7de2a1f4ea5e2cffd6c16c7fc1814"},"path":"demos/end-to-end/generated/manifest.json"},{"digest":{"sha256":"ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"},"path":"demos/end-to-end/generated/positive-bundle/artifacts/final/71895faa8bce0d0426b2e447bb12d15e50e9f9d27135ebabbb94bc9d59426d4e.bin"},{"digest":{"sha256":"648ce73f03bcbc8fb8e7cb41be5dd02d1809163ef7a26ee34ce0f0bbe13039c2"},"path":"demos/end-to-end/generated/positive-bundle/attestations/1f28b72bcd4c1e9b7df71403ac6bb1670c2f2b09628ca6d76a2fa384db9a0848.dsse.json"},{"digest":{"sha256":"3a29f64b3c19a732f7e49507c798e5cb8b2669f3e3b6b01699af51a880884364"},"path":"demos/end-to-end/generated/positive-bundle/attestations/56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a.dsse.json"},{"digest":{"sha256":"b465ebfdd192634cc7c50859fca560af0662a2faa1762b70e35dfcb866536dd7"},"path":"demos/end-to-end/generated/positive-bundle/attestations/99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce.dsse.json"},{"digest":{"sha256":"a35b35aa42754b01de02fb2572f3c377a0ef1c05f16b2b831363990360d84624"},"path":"demos/end-to-end/generated/positive-bundle/bundle.json"},{"digest":{"sha256":"8093bb7234ad9d3697881fc7419a6b7b6bd8c3d4b5272c84181380929aee4f01"},"path":"demos/end-to-end/generated/positive-bundle/manifest.dsse.json"},{"digest":{"sha256":"be9213a1a8faf1587165d905c7cde5d6fd19585a3148494ae64d97240781c6b3"},"path":"demos/end-to-end/generated/positive-bundle/schemas/catalog.json"},{"digest":{"sha256":"31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"},"path":"demos/end-to-end/generated/positive-bundle/schemas/resources/31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb.schema.json"},{"digest":{"sha256":"68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"},"path":"demos/end-to-end/generated/positive-bundle/schemas/resources/68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb.schema.json"},{"digest":{"sha256":"7f20d92fa844586ce71413dfdcb771d9d60d549f1fb8f5e662e84b1db10d568c"},"path":"demos/end-to-end/generated/receiver/attacker-known-policy.json"},{"digest":{"sha256":"be9213a1a8faf1587165d905c7cde5d6fd19585a3148494ae64d97240781c6b3"},"path":"demos/end-to-end/generated/receiver/catalog.json"},{"digest":{"sha256":"ab26b172e0cee9cab64da106e4c6c10c6bcbb7b4497537e8faf500f93af089c5"},"path":"demos/end-to-end/generated/receiver/customer-public.profile.json"},{"digest":{"sha256":"6c938ed199e83383b3353aea76d311f6f57cf35cdd03260b01f8806105eaf483"},"path":"demos/end-to-end/generated/receiver/expected-artifact.json"},{"digest":{"sha256":"614eb137303bcea78f25ded2e332a10649358484f9582984c1730ddc106ebfcd"},"path":"demos/end-to-end/generated/receiver/policy.json"},{"digest":{"sha256":"bacbcae9de19bda95175447480eada15712c8f425d7d5286460a1cc46e8b82cf"},"path":"demos/end-to-end/generated/receiver/public-transform-metadata.profile.json"},{"digest":{"sha256":"31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"},"path":"demos/end-to-end/generated/receiver/resources/31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb.schema.json"},{"digest":{"sha256":"68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"},"path":"demos/end-to-end/generated/receiver/resources/68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb.schema.json"},{"digest":{"sha256":"c6b36abc1f82983fab37e639f6b43921e0c1e72ca738f0afb8e88d289944f00c"},"path":"demos/end-to-end/generated/reports/edited-signed-metadata.json"},{"digest":{"sha256":"b64fbcfbd014be75c270adccec2301a2f8cc1717a6e2a86a26ffb9faaf4a2574"},"path":"demos/end-to-end/generated/reports/mutated-final-data.json"},{"digest":{"sha256":"3395d12cd62bde846297f5b25accf7588598d8aee0dcbdebed30c0a232a4ead8"},"path":"demos/end-to-end/generated/reports/positive.json"},{"digest":{"sha256":"683cbf4ec9843a7cee020f4278fb7d0652beebaaf8ad3ef113aa1db3865e8e42"},"path":"demos/end-to-end/generated/reports/private-schema-violation.json"},{"digest":{"sha256":"1b561b2448fe94afc35cab08c95e8f7fd7f62904a06f0758fc82ff0214faf1dd"},"path":"demos/end-to-end/generated/reports/removed-predecessor.json"},{"digest":{"sha256":"6d3a3e782f6ef26d3f08698dc2cfc341c2f097fafa417c7d67ed6cee5353ff47"},"path":"demos/end-to-end/generated/reports/rewired-step.json"},{"digest":{"sha256":"5085ce36d7fbff75b985dff6ec89999f4aee1a6c806d14e1e9fda719af53a6fe"},"path":"demos/end-to-end/generated/reports/statement-digest-mismatch.json"},{"digest":{"sha256":"d67db9262c3544bb8e08a1652be29214e0e50e6da50918de2ccf211116f10ec4"},"path":"demos/end-to-end/generated/reports/unauthorized-signer.json"},{"digest":{"sha256":"68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"},"path":"demos/end-to-end/private-schemas/example.internal/customer-public-v1.schema.json"},{"digest":{"sha256":"31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"},"path":"demos/end-to-end/private-schemas/example.internal/public-transform-metadata-v1.schema.json"},{"digest":{"sha256":"6cd8951a30b056ad72d6c6ff46e194216deeaaf2b2e153087c1f86199083993b"},"path":"demos/end-to-end/run_demo.py"},{"digest":{"sha256":"258aaa395e7f98c0ae91f55167b62b26177234b9327b0fb05c67dd8551059501"},"path":"demos/end-to-end/transform.py"},{"digest":{"sha256":"0533ab1f8b3b6389f1ce1e05c12e5672b141cbd98bc9c8cfd013325afa547dd8"},"path":"docs/profiles/README.md"},{"digest":{"sha256":"daeb4ef697b950e3684f6b6007b42784338ee67078385d1f5816002e8df4cce0"},"path":"docs/profiles/origin-l3-reference-v1.profile.json"},{"digest":{"sha256":"a6196356b740d8f7c72bce9093956c1e9457a8479a7b13269d00f9ff51af2f86"},"path":"docs/profiles/origin-l3-reference-v1.schema.json"},{"digest":{"sha256":"28360681083e42590ec73566462b8c359cf79330f6bc72758ed746ccccb83d70"},"path":"docs/v0.2-adversarial-review.md"},{"digest":{"sha256":"423045a22cd33582d3cbef2b20a5540b0ca0f5183a05bc56057010dde673cff4"},"path":"docs/v0.2-architecture.md"},{"digest":{"sha256":"af3562e92f15e6a0c8f3ea4df075ae8f2f42239775d6160095a69b12a460b45a"},"path":"docs/v0.2-integrations.md"},{"digest":{"sha256":"a06896a6715c880aed62257706aa2fa4a31a5b7e1b1cd764eeb0c4b58b5a2047"},"path":"docs/v0.2-migration.md"},{"digest":{"sha256":"76a31d3305cf5830d7c59292cb89df17ec8e5174d2d8ce16a9285685411b3294"},"path":"docs/v0.3-migration.md"},{"digest":{"sha256":"5c76dbd61ebcbcb02461484c0fc8a9a483547b8f82de76c3adb179acdce69ae2"},"path":"examples/github-actions/README.md"},{"digest":{"sha256":"e7ac4dfd79a8762949f93ab1d88219027ea492a79ada8351a8b3d36206684307"},"path":"examples/github-actions/keyless-lineage.yml"},{"digest":{"sha256":"6da653df2641f3ee15776d92b87a697a4b6f5321431efdeebd8f9383f889a60a"},"path":"examples/go/README.md"},{"digest":{"sha256":"9add314d5aa0ccb4ce05bb4aed7c35d2210398534c58a6c1b75d5714b8dc1e3d"},"path":"examples/go/canonical/main.go"},{"digest":{"sha256":"09dc361bc735db0b07f15185e34026026a249e2865729d28cacc595ade494805"},"path":"examples/go/canonical/main_test.go"},{"digest":{"sha256":"4fcc4156bcc0f79d4731e26a1e3dbf244ae23ab621edc0bedd4fc2b3434717ce"},"path":"examples/go/dsse/main.go"},{"digest":{"sha256":"1cb879c88cd385f317fe507595ad0db47dec4c8150053f31f8d565a06c0d91c8"},"path":"examples/go/dsse/main_test.go"},{"digest":{"sha256":"b11b58712d80e9169c11449f1e809bcb5ee7b51c1e7f0aa6802092e7d135a0a3"},"path":"examples/go/go.mod"},{"digest":{"sha256":"e43ab9d4d2ddf09886e451fb0159e04f8e82e70edfdd7c28d86817cc6ab9f444"},"path":"examples/go/go.sum"},{"digest":{"sha256":"483439c4914d2a50aa5b0393c1bcc59670a4f15d3b60901733db4a933557d157"},"path":"examples/go/validate/main.go"},{"digest":{"sha256":"53decaac8f17e200838c1a0b4fa4d224c002ac7362b018bcbf5d81b990ee6913"},"path":"examples/go/validate/main_test.go"},{"digest":{"sha256":"655d5d56bbe37b2ad3888bc5a1c222be6640aa997bf41a32e41d8ddfd5554d04"},"path":"examples/go/verify/main.go"},{"digest":{"sha256":"028fcd55828c4fd7f047f24abaafb4b76c597f448acb9efdccec1783e8d4f578"},"path":"examples/go/verify/main_test.go"},{"digest":{"sha256":"95d3c7bbbb863ad8f6dc9cd7b3a2a8b1570c58721bc0cdd4dcec976ed7a7e534"},"path":"pyproject.toml"},{"digest":{"sha256":"711aeacd1f1d2f8dbf514a48b3d5052c8493afae8177439feafad593262031c9"},"path":"release/checksums.schema.json"},{"digest":{"sha256":"2a6ca7b341abcbc0995369e5bf338e95f531cfaaa417715906da8169e5f829c8"},"path":"schemas/v0.2/bundle.schema.json"},{"digest":{"sha256":"b68cb2cae64cfcd2a5021a725505ccbaa80dfaa053322ce276af9c6650860304"},"path":"schemas/v0.2/catalog.json"},{"digest":{"sha256":"30b478401528256f823a27418d1316ca27b1ccb8ecaf45d1afa2edbbcb1fd797"},"path":"schemas/v0.2/catalog.schema.json"},{"digest":{"sha256":"5a0498a2911bbe3029c9dbcbcbbbb2c2ce683d280b796a5f09ad271d8e9b034f"},"path":"schemas/v0.2/dataset-manifest.schema.json"},{"digest":{"sha256":"49de7cf790e3a0c7bd3b83ee7322164d2a5a829648fe1407c79c07f4d74a0f66"},"path":"schemas/v0.2/envelope.schema.json"},{"digest":{"sha256":"762746d6636a9521382c58d6861f7ac87fd11fea990845d70389b68b4977f0d6"},"path":"schemas/v0.2/handoff.schema.json"},{"digest":{"sha256":"3f56d68d758bb72c2bcbabd922e1ac7d6eb6dd9c3e6baa78a9f104cf0a64badc"},"path":"schemas/v0.2/origin.schema.json"},{"digest":{"sha256":"563ff211e383732113d7455bf5c6bf07d1a87401dd41e9db68bdd5e99b433fb8"},"path":"schemas/v0.2/profile-dialect.schema.json"},{"digest":{"sha256":"abe12266ae10b57d95d8fd14489c6cdaedd4ed67ef8f7a44db7b18249832665c"},"path":"schemas/v0.2/profile-reference.schema.json"},{"digest":{"sha256":"dbe4487be9b44521e4fa9b63900992304b9fb4e4985b7899cb23af6916efe5e0"},"path":"schemas/v0.2/statement.schema.json"},{"digest":{"sha256":"8b8dad3361327578c79a5b69912fe77e747d4ac6d1c6b234327f1a56621b1a23"},"path":"schemas/v0.2/transform.schema.json"},{"digest":{"sha256":"5f18360abc901e175a16ec3a0ed1a4fa47626b34af08d64f6adb33c78fe9d6ac"},"path":"schemas/v0.2/trust-policy.schema.json"},{"digest":{"sha256":"f1d47e7c8273deff5a65a6901d4f0b00f2eecaf7da5d4bc29055508a8877c3ae"},"path":"schemas/v0.2/verification-report.schema.json"},{"digest":{"sha256":"a109445c9c98a21b39bb8585cd13dbbd65397b17091e039dd795c48f41878bd2"},"path":"schemas/v0.3/bundle.schema.json"},{"digest":{"sha256":"516a51cfceb69bd90a8d82ed33c1cf03728fe1f10ae95c07643c6e1ffd8ccd18"},"path":"schemas/v0.3/catalog.json"},{"digest":{"sha256":"4221c7b9ccb36a75b070076280cfa967d9c3a1ebad2a1dc70eb7a02dda54b8f4"},"path":"schemas/v0.3/catalog.schema.json"},{"digest":{"sha256":"1fe3229d3e788883d6863fbaf74daf71cb813001ec06023bec343c7703de732d"},"path":"schemas/v0.3/dataset-manifest.schema.json"},{"digest":{"sha256":"6df0fd75979328501987ecba5529189b46ebde1368af43822a71fe5dc21f13a2"},"path":"schemas/v0.3/envelope.schema.json"},{"digest":{"sha256":"69a73258176125dce197f0ef99bd370e571fa53b716e298468794886069fecfb"},"path":"schemas/v0.3/handoff.schema.json"},{"digest":{"sha256":"b0d887d29be80465603cc55bc446b36214ce230a87ddc970b6b01e3c98c338d9"},"path":"schemas/v0.3/origin.schema.json"},{"digest":{"sha256":"db7d7c4e2649a621d04fd0c4362d367e2f76e46f635831188dce3aa70d15efae"},"path":"schemas/v0.3/profile-dialect.schema.json"},{"digest":{"sha256":"b0626837ebcd5136309088c73956b01aa9e27a5ebfbd1637c8827e6fa5ccd537"},"path":"schemas/v0.3/profile-reference.schema.json"},{"digest":{"sha256":"a3188917e66781015e6beff88320889595eebd046f65869eadc8963db8137213"},"path":"schemas/v0.3/record-declaration.schema.json"},{"digest":{"sha256":"8bd61e394b1cfd19a77b652dfc97d3dfea173c487e95afe6749f7375f413b6e6"},"path":"schemas/v0.3/record-inclusion-proof.schema.json"},{"digest":{"sha256":"cc992f51a0ce8d5783461841a59ee3a137d210f6deca2ede8350057932bcc94f"},"path":"schemas/v0.3/statement.schema.json"},{"digest":{"sha256":"f99d50bcace2e9f64a5d0ad4efbe71c3d543de03ac8c7201a6cf05282a8463aa"},"path":"schemas/v0.3/transform.schema.json"},{"digest":{"sha256":"317eb1a5535354e5b38638c3ed0bbf2659cc495b54d669f83aafc389c15fc768"},"path":"schemas/v0.3/trust-policy.schema.json"},{"digest":{"sha256":"a2f73bd1854c516219f8afa558d8db3b71188b549d306a7011647c1817318ae5"},"path":"schemas/v0.3/verification-report.schema.json"},{"digest":{"sha256":"f6f67fe123830c52e5c617979f7ecc70d89373f5c2ad758ee90849b0f36d0ebd"},"path":"scripts/__init__.py"},{"digest":{"sha256":"e759e6c99a2bdae69688dd7516bee8fe7b0d1275e012c90925a70575ab015b21"},"path":"scripts/build_schema_catalog.py"},{"digest":{"sha256":"55d3616541c3a90b046c8724a7d25cf0a945cf3d51ebd57e64407e7b00f262ea"},"path":"scripts/check-go.sh"},{"digest":{"sha256":"debda6c84ffc9ba0bf5273453f8517d4dad78d9d681bf0d9ce6a1c588fc191e8"},"path":"scripts/check-schema.sh"},{"digest":{"sha256":"23bca9fb1ea47e971f33c4bd095701fe4904acb871ad6f4513f149398c221d1e"},"path":"scripts/check.sh"},{"digest":{"sha256":"db0b5de539657d1699486c08c756419d91842ba1b0c41f320d6178c1c8e39cbb"},"path":"scripts/check_internal_schemas.py"},{"digest":{"sha256":"dbe768425ed43df42e9036abe890591fefdf23d6ae8d21284e7f32b82f67f3de"},"path":"scripts/demo.sh"},{"digest":{"sha256":"8f99c954e27fc1ebdba5ebfc8df6088d214eb1c5aecd26b277cf2fc99a740f78"},"path":"scripts/generate_unicode_tables.py"},{"digest":{"sha256":"ebab6952e2f25fd7cbdca3c2b6be9d8e149490b493efe9d150c8cde6a9874e0e"},"path":"scripts/release-check.sh"},{"digest":{"sha256":"74f8ad46d78258791a7185bfba2d4e8285459018ae50b7d52fc9da8e7ce0dcdd"},"path":"scripts/release_checksums.py"},{"digest":{"sha256":"119b8b8b03a9764d02b18f7e38441a822052178c76b03b83498cf71aebf8fce1"},"path":"spec/v0.2.md"},{"digest":{"sha256":"c22d3e29e4a3c1ca079702c75be8decf0386496edfc810ecf39e5b320100363e"},"path":"spec/v0.3.md"},{"digest":{"sha256":"873dc5d49941ed2c9b991ecfbcfefd61f356dffd818dbb452311ede702b1102f"},"path":"src/makoto/__init__.py"},{"digest":{"sha256":"197753dd18309f08d3117a757e3739bcb4217a5fafa4750d21af99676f40d282"},"path":"src/makoto/assurance.py"},{"digest":{"sha256":"666c19217c2de57fb711a6e3026b76586aeaa8a86f026eaf8403001934b88e88"},"path":"src/makoto/bench.py"},{"digest":{"sha256":"c41c2a99e5d936f4c1a001d3e8842770db523451e84066723b0fb48943eafd42"},"path":"src/makoto/bench_check.py"},{"digest":{"sha256":"8acb2bf83d12fba8e2aa20c829aaa83aee8a1c04f5bdbeb9e2b2bb697a234e67"},"path":"src/makoto/bundle.py"},{"digest":{"sha256":"423fd98b6bf3300ad2cef0639a1baa8cb9223012be885dd7c67d52bb06069a29"},"path":"src/makoto/canonical.py"},{"digest":{"sha256":"75824b1431d192bce6f9dabb3ea92f297223d9cb6989e47c745763cf27bbfdaf"},"path":"src/makoto/cli.py"},{"digest":{"sha256":"cd37086cb1d6d24cf4010e962b08c16a98f055bbdafc2abbf611443827756f08"},"path":"src/makoto/dataset.py"},{"digest":{"sha256":"1919d5dc741894967c0ac4a90f97d5f7e37bd945f35f2fb5a93858bc07d40160"},"path":"src/makoto/digest.py"},{"digest":{"sha256":"0b17e4753a2023a4cd705fa93188184e4508666b5ba84d8ebcc808483703629b"},"path":"src/makoto/dsse.py"},{"digest":{"sha256":"88d5e8f44d4132960bee2a01723ed9cd7fb8fffae62cd174877ca1d37764c6b0"},"path":"src/makoto/graph.py"},{"digest":{"sha256":"2f55af5ac29bc2e89ca9af73b8956c14c01da88aec64217fe88389c1de5ed992"},"path":"src/makoto/internal-schemas/dataset-worker-result.schema.json"},{"digest":{"sha256":"e43ef2835191a132b63e51571c913ac4a87bc20ff1c9f247a88e7c562c766cad"},"path":"src/makoto/internal-schemas/profile-worker-result.schema.json"},{"digest":{"sha256":"257bbffd61794c719153cc59990428b1110799e904f7fb04e8b47dc0fcf3ffed"},"path":"src/makoto/licence.py"},{"digest":{"sha256":"efd6037ec0c4a75ec667733c2bd3c8b1199d45159f0d78688e73242c78cc9757"},"path":"src/makoto/model.py"},{"digest":{"sha256":"e49a37be389cdbf008e477ce4063da0e053d320d3ebbf038b6a085ae9f48fd8a"},"path":"src/makoto/pattern.py"},{"digest":{"sha256":"544040032e53a69be40383f11f932be82f76131cb27ca924ee59c0ffd6befaea"},"path":"src/makoto/policy.py"},{"digest":{"sha256":"b6f90909e4a748708f5fdde897ea4c3f513b0d4abd66eea4447df6c811d2a935"},"path":"src/makoto/protocol.py"},{"digest":{"sha256":"1db658e075d3cbed928300a4c964c4b3f7a7f136921817d45d540a6d34ff3ec8"},"path":"src/makoto/records.py"},{"digest":{"sha256":"8a5824a2628ac05ea3373725af507295b3d1267b554f6098c3644abdd534b49f"},"path":"src/makoto/report.py"},{"digest":{"sha256":"b7203b145c564c716a813451fd4ead04dfce5325e9db75151d1005046a76704c"},"path":"src/makoto/schema.py"},{"digest":{"sha256":"8fc15009e29697bdf938c241594263c924122a725ab253d4bb083b25e74b6efb"},"path":"src/makoto/schema_catalog.py"},{"digest":{"sha256":"1b6a50a5cb1a14fb4e329a12b18d4ba823cf02e0bb9d13c2d33494a986e5f8d3"},"path":"src/makoto/sigstore.py"},{"digest":{"sha256":"4b10b1e2500edaa095c7771d74f95271acc31b8313a3954cbdbe6a4e4b055a80"},"path":"src/makoto/standard-profiles/v0.3/license-claim-v1.schema.json"},{"digest":{"sha256":"6365aa3c77b13e0fc9c6861bf4ed99d7f18939065ca2f6cdc93f508f1bb7952d"},"path":"src/makoto/standard-schemas/draft-2020-12/catalog.json"},{"digest":{"sha256":"bf273b26f9f735b93ece78f2b61b36676e1d122ce78ab37ad5a2e45dfa1ca2b1"},"path":"src/makoto/standard-schemas/draft-2020-12/meta/applicator.json"},{"digest":{"sha256":"a10456605b2b5bb12a1b4dcfc0300f02f54d3e8bb3646bed7724583866627682"},"path":"src/makoto/standard-schemas/draft-2020-12/meta/content.json"},{"digest":{"sha256":"21f79d143fab1f180245c331e5657057045b36794d41fe151e6e4fed65035299"},"path":"src/makoto/standard-schemas/draft-2020-12/meta/core.json"},{"digest":{"sha256":"5c79404f831dd905c0f40fefac7c6f3e51bf3729b4a876a5c2020178d97f3bcc"},"path":"src/makoto/standard-schemas/draft-2020-12/meta/format-annotation.json"},{"digest":{"sha256":"c664d438a84d58889c8edecd248ce2f945a4bc0e3b087323b11303dc136abfbe"},"path":"src/makoto/standard-schemas/draft-2020-12/meta/meta-data.json"},{"digest":{"sha256":"fc99f32188da41689a9382af174dd42e8b255e4374965c157b8286556b4ab2bc"},"path":"src/makoto/standard-schemas/draft-2020-12/meta/unevaluated.json"},{"digest":{"sha256":"e921c5b79264d3689af01c1af1ffdf692e09f1c45df90a0f08eb7288c9acdeab"},"path":"src/makoto/standard-schemas/draft-2020-12/meta/validation.json"},{"digest":{"sha256":"41da76f5afb7ce062d248f762463a92f7ca47e4e0f905b224ba6afeef91ded0f"},"path":"src/makoto/standard-schemas/draft-2020-12/schema.json"},{"digest":{"sha256":"b6b25f0fb6831f55f499b5d0183aef0d0676d1549b97511673fdcb13b63e4f46"},"path":"src/makoto/standard_registry.py"},{"digest":{"sha256":"cdd49e55eae3bbf1f0a3f6580c974a0263cb86a6a08daa10fbf705b4808a56f7"},"path":"src/makoto/unicode/15.0.0/CaseFolding.txt"},{"digest":{"sha256":"3b019c0a33c3140cbc920c078f4f9af2680ba4f71869c8d4de5190667c70b6a3"},"path":"src/makoto/unicode/15.0.0/CompositionExclusions.txt"},{"digest":{"sha256":"d5687a48c95c7d6e1ec59cb29c0f2e8b052018eb069a4371b7368d0561e12a29"},"path":"src/makoto/unicode/15.0.0/DerivedNormalizationProps.txt"},{"digest":{"sha256":"806e9aed65037197f1ec85e12be6e8cd870fc5608b4de0fffd990f689f376a73"},"path":"src/makoto/unicode/15.0.0/UnicodeData.txt"},{"digest":{"sha256":"28a297ed671e572b00f9bc88bc04301f480b24b9ea022dc99f9a63d790a12ccb"},"path":"src/makoto/unicode/15.0.0/tables.json"},{"digest":{"sha256":"5ce6d664aa1086695245f49141fa7ef609e5e32d114fb2b1080cceac457dc897"},"path":"src/makoto/unicode/15.0.0/unicode-catalog.json"},{"digest":{"sha256":"a208a3575eda29159ab732df8c07fd21c4a51f011480511f16f33f3ce10afcc1"},"path":"src/makoto/unicode15.py"},{"digest":{"sha256":"bcdf08bd9381a179eed832518123c2a34cc9640634fd4a55a17e38c90be3ad5f"},"path":"testdata/v0.2/assurance/README.md"},{"digest":{"sha256":"73826a3daa5e9823445cc7668b6efc9c8fc995ae7c44773b937f10c9761247b4"},"path":"testdata/v0.2/assurance/negative/authorized.json"},{"digest":{"sha256":"eb690e9045c039a127b8313d315b2f4d8a21a383b7a0f6c44d105acc1f6a9ca4"},"path":"testdata/v0.2/assurance/negative/freshness-anchored.json"},{"digest":{"sha256":"d71e6ed06e9306238ef22f0e8696db0f68f60a7df5c4be2ecca96892cb9f46d8"},"path":"testdata/v0.2/assurance/negative/graph-complete.json"},{"digest":{"sha256":"2c97e749913a2ca8a8718928dc4b2aba2c5e4899d71839c8aaadd537c29c97f4"},"path":"testdata/v0.2/assurance/negative/origin-l1.json"},{"digest":{"sha256":"c0394d922130e05b3d9b07114946646ff77547d8d445c1d5b76978658eb32da5"},"path":"testdata/v0.2/assurance/negative/origin-l2.json"},{"digest":{"sha256":"bc1e70a6ecd736d19e6062edc4ccf3fcce3b292db6ff947f586f4db0d35ab1be"},"path":"testdata/v0.2/assurance/negative/origin-l3.json"},{"digest":{"sha256":"8689411caddd176e9d87cb99714a5a59f9fdfa453bd7dffac8a6be462d8a9264"},"path":"testdata/v0.2/assurance/negative/reproduced.json"},{"digest":{"sha256":"1c5ad8e3b9f829fd8ee245e6afeca8ecd2a2b70c3e88d9f1ad990395d0caec1d"},"path":"testdata/v0.2/assurance/negative/schema-conformant.json"},{"digest":{"sha256":"af3218de11a8c38fbe486b0fc20693fb6c5a5189813cc9260077804d2c9be072"},"path":"testdata/v0.2/assurance/negative/transform-l1.json"},{"digest":{"sha256":"fe2c72c243e1a7e185f48f51f023b99f6013045684a7c63db5b8dec64eb5b90a"},"path":"testdata/v0.2/assurance/negative/transform-l2.json"},{"digest":{"sha256":"7b39ceef0d6cef6261a3ce0c95a455f791deba78c626834cfd7bfc4e91cffccf"},"path":"testdata/v0.2/assurance/negative/transform-l3.json"},{"digest":{"sha256":"692115737e5204050519f9aa721a1aa1e3055940bc9a3efc66afc9850af87f98"},"path":"testdata/v0.2/benchmarks/README.md"},{"digest":{"sha256":"bbe34895a60edb2c474ce09ad00169ba88219cad5b14a2422d65f3e1336bb15b"},"path":"testdata/v0.2/diagnostic-map.json"},{"digest":{"sha256":"d73e85c42c2ceec88bc4f9ff68d3a503edd0ac9b427a0a04a8961add6ce4ee5c"},"path":"testdata/v0.2/negative/edited-signed-metadata/expected-report.json"},{"digest":{"sha256":"1d1e5e144f3ded3bc7b92fa56e826f0ae9683d7783c919a5cc19da42eac21078"},"path":"testdata/v0.2/negative/mutated-final-data/expected-report.json"},{"digest":{"sha256":"236dc3ad19993795406c913a68fd48c5a791dd9bf29f89f28c6de20a77c79fe5"},"path":"testdata/v0.2/negative/private-schema-violation/expected-report.json"},{"digest":{"sha256":"ec0827d528d9affc0026ea9d9e605c0445d8e48bdfb78b0898952c00d4da0577"},"path":"testdata/v0.2/negative/removed-predecessor/expected-report.json"},{"digest":{"sha256":"d73e85c42c2ceec88bc4f9ff68d3a503edd0ac9b427a0a04a8961add6ce4ee5c"},"path":"testdata/v0.2/negative/rewired-step/expected-report.json"},{"digest":{"sha256":"6218056a69dc52a3b01b74ce6e4b271dd2fc4088dc46299b463718eae0593fdc"},"path":"testdata/v0.2/negative/statement-digest-mismatch/expected-report.json"},{"digest":{"sha256":"692d12640f2f835c21f9860f9170d91510a95aa85947bd1ec56389804f562cfa"},"path":"testdata/v0.2/negative/unauthorized-signer/expected-report.json"},{"digest":{"sha256":"fb9ac8cc154a80cad6caac9897af55a4e75176af6f4e2bb6edc2bf8b1d57f326"},"path":"testdata/v0.2/unicode/NormalizationTest.txt"},{"digest":{"sha256":"b7a303d51819243f9b2a9abaa77e25c57297139a934a11b1959e3deb83a24bc8"},"path":"testdata/v0.3/diagnostic-map.json"},{"digest":{"sha256":"2a4194678f61b519b1e788ad4a57ea3b34a176d46e9697050de1a1bb559b43e7"},"path":"testdata/v0.3/license/malformed-spdx-statement.json"},{"digest":{"sha256":"46290451190d64f24850929a4aa93eb1a1b9f25a65aa88ed80dce7d250598505"},"path":"testdata/v0.3/license/missing-claim-statement.json"},{"digest":{"sha256":"71791d0de4bd25347308694431c99bcd4a3ff7143b55504b99d52b856689584b"},"path":"testdata/v0.3/license/positive-statement.json"},{"digest":{"sha256":"561abacf3e6659236065e40cd0b517142565638ef0757e5c7228a3d15f8ec4fc"},"path":"testdata/v0.3/records/byte-ranges.json"},{"digest":{"sha256":"f69ad8f56a185e59398f973ddaa58c237130b0404465b3df216f825b4e6f35e1"},"path":"testdata/v0.3/sigstore/README.md"},{"digest":{"sha256":"f9a049fdd2d7e041faffa36afefa4e755e2189bd65de507004d3798afa695ae6"},"path":"testdata/v0.3/sigstore/dsse-bundle.json"},{"digest":{"sha256":"6494e21ea73fa7ee769f85f57d5a3e6a08725eae1e38c755fc3517c9e6bc0b66"},"path":"testdata/v0.3/sigstore/trusted-root.json"},{"digest":{"sha256":"9c86d995aa98f92994410321d3b7a5769a3eb437c6695e254f1fb4520e492416"},"path":"tests/test_assurance.py"},{"digest":{"sha256":"4155fe0a442a919d6b02c4e534e5b0057e9f65cb4c90fcb7cdb6e93b81315f4a"},"path":"tests/test_bundle.py"},{"digest":{"sha256":"6f4f977a0e96c85cfd3b8db6ddea4639ca9ddfefb9b820732633a7758b2a23c8"},"path":"tests/test_bundle_dataset.py"},{"digest":{"sha256":"d6b3480a9f81ffa7ec52d3eecff6355d89d92de683e3d9332cff0b0596f910f9"},"path":"tests/test_cli_contract.py"},{"digest":{"sha256":"08527afb7a0acadb279ac3f6199566f6fc6f8ba9ec21c1a29678e0b5ec99dc50"},"path":"tests/test_cli_dataset.py"},{"digest":{"sha256":"01a2163408fe24bd4289cc6071c48cf3b4a2960a14a740153a2dc8f76f0209cd"},"path":"tests/test_crypto.py"},{"digest":{"sha256":"1eef1ea435a730f7ed5ed2c1d89455bbc7c855c5981f480f0e314d7645556094"},"path":"tests/test_dataset.py"},{"digest":{"sha256":"5e09f60155a5c8564b50ed4aca77ffa78bdf54492f53606c0a2d0006ece2163b"},"path":"tests/test_demo_entrypoints.py"},{"digest":{"sha256":"63b22a554853c2d17ddcbd4466c9bb041b34e4d0c12ac0eb1faabcb632e1e00b"},"path":"tests/test_diagnostic_map.py"},{"digest":{"sha256":"9d9e770f551892be18a23ed5d12320484718755c66cb667c340cc82e99c5f76b"},"path":"tests/test_internal_schemas.py"},{"digest":{"sha256":"a9b8be4aa32caaeafd40d798e09c96dc9fa5a9639d94242ab9e852e3a7850c2c"},"path":"tests/test_model.py"},{"digest":{"sha256":"37d6ea12a2305270134feb49ed37f85f9cd61e5eafa957b0c71c63ca66c942b4"},"path":"tests/test_pattern.py"},{"digest":{"sha256":"d4e1a43d2b52f5f4ec91b6349553ec6613ba8920cfd28a7042097689cb07074a"},"path":"tests/test_release_checksums.py"},{"digest":{"sha256":"d66104ba6d3ff3463408811ab5f8a95fdaa785e66361cb0da750cd0783322bd7"},"path":"tests/test_schemas.py"},{"digest":{"sha256":"5340639526d7a4b90ec6b7b66c7544a607572c73f7c24e4a23a95fab7882f79a"},"path":"tests/test_sigstore.py"},{"digest":{"sha256":"6dc6ac420e91c00b3050c28cc372a5ba8cb2f86bdb43cadd51868f04bc42c375"},"path":"tests/test_unicode15.py"},{"digest":{"sha256":"c9e1ae0ee42688b7c6d7e68a3f605530c1b7bb9ba58b26a72b432c7a5c913406"},"path":"tests/test_v03.py"},{"digest":{"sha256":"bee205abcf93a4ed2af2eaf9cb68f7744cb36992dcfea34bf71d4205691b2838"},"path":"uv.lock"}],"tag":null,"version":"1"}