{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Historical dependency-record provenance",
  "summary": "This undated public derivative describes six pinned build components and records that five download-address fields were removed. It includes a digest tying the derivative’s provenance to the earlier source record. One component entry mentions an image obtained on 28 July 2026; that is not a date for the whole record or a new verification run. The record supports historical reproducibility only. It does not certify current component versions, vulnerability status, deployment state or the completeness of a software bill of materials.",
  "date": "28 July 2026",
  "scope": "Historical evidence; the scope and environment are described in the recorded result.",
  "result": "This undated public derivative describes six pinned build components and records that five download-address fields were removed. It includes a digest tying the derivative’s provenance to the earlier source record. One component entry mentions an image obtained on 28 July 2026; that is not a date for the whole record or a new verification run. The record supports historical reproducibility only. It does not certify current component versions, vulnerability status, deployment state or the completeness of a software bill of materials.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/versions-lock-public"
}