Historical dependency-record provenance

The public summary as JSON. These are the same reviewed fields shown in Read.

{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Historical dependency-record provenance",
  "summary": "This undated public derivative describes six pinned build components and records that five download-address fields were removed. It includes a digest tying the derivative’s provenance to the earlier source record. One component entry mentions an image obtained on 28 July 2026; that is not a date for the whole record or a new verification run. The record supports historical reproducibility only. It does not certify current component versions, vulnerability status, deployment state or the completeness of a software bill of materials.",
  "date": "28 July 2026",
  "scope": "Historical evidence; the scope and environment are described in the recorded result.",
  "result": "This undated public derivative describes six pinned build components and records that five download-address fields were removed. It includes a digest tying the derivative’s provenance to the earlier source record. One component entry mentions an image obtained on 28 July 2026; that is not a date for the whole record or a new verification run. The record supports historical reproducibility only. It does not certify current component versions, vulnerability status, deployment state or the completeness of a software bill of materials.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/versions-lock-public"
}

Download this public summary

This derivative has its own digest. It is not the original transcript or a new test. Historical original records are preserved privately.

Download public JSON →

SHA-256 4b859c7a4c0f01a7af3f85a0cf7664fb1a085bab2f344fc8174209e27b090ba3