{"ok":true,"traceId":"a3b0a9f0-4fdb-4f72-990f-377d6a62ee85","manifest":{"issuer":"VentureOS","schemaVersion":"1.0","generatedAt":"2026-06-12T01:10:28.344Z","hashAlgorithm":"sha256","canonicalization":"stable-json-v1","scope":"public_registry","certificateId":null,"projectId":null,"rootHash":"8f213a61fefe78c8f42bcc1026a4dc61101357e787a8c73671eedbbbde19d64e","merkleRootHash":"466c8cb2808cd40370c7c69a85cb7923c9af408ae6f6edbc17879fa3950d6fde","anchorHash":"90310cb334f5b3829a443810087d0997a22eb0ec103ba2de8331bfde588368a4","entryCount":0,"firstEntryHash":null,"lastEntryHash":null,"logUrl":"https://ventureos-full-fixed.vercel.app/transparency-log","publicEndpoint":"https://ventureos-full-fixed.vercel.app/.well-known/ventureos-transparency-anchor.json","signature":{"algorithm":"Ed25519","signingKeyId":"vos-key-20260606-5725022f","signature":"8iP9V7EXOB8tGNAMutkw/2ijo53OsSNgNN1jPfCCHRpweTZ1wVPNK01k1M0O7dCDA2WfM2WRja20WTAVc8DaAQ==","payloadHash":"90310cb334f5b3829a443810087d0997a22eb0ec103ba2de8331bfde588368a4"},"signatures":[{"signerRole":"ventureos_system","signerName":"VentureOS","algorithm":"Ed25519","signingKeyId":"vos-key-20260606-5725022f","signature":"8iP9V7EXOB8tGNAMutkw/2ijo53OsSNgNN1jPfCCHRpweTZ1wVPNK01k1M0O7dCDA2WfM2WRja20WTAVc8DaAQ==","payloadHash":"90310cb334f5b3829a443810087d0997a22eb0ec103ba2de8331bfde588368a4","status":"present"},{"signerRole":"customer","signerName":"Customer","algorithm":"Ed25519","signingKeyId":"","signature":"","payloadHash":"90310cb334f5b3829a443810087d0997a22eb0ec103ba2de8331bfde588368a4","status":"not_configured"},{"signerRole":"auditor","signerName":"Auditor","algorithm":"Ed25519","signingKeyId":"","signature":"","payloadHash":"90310cb334f5b3829a443810087d0997a22eb0ec103ba2de8331bfde588368a4","status":"not_configured"}],"signaturePolicy":{"required":["ventureos_system"],"optional":["customer","auditor","external_witness"],"satisfied":true},"deterministicRebuild":{"guarantee":"Sort entries by timestamp, type, sourceId, and sourceVersion. Hash each canonical entry with the previous entry hash. The final entry hash is the hash-chain root; the RFC6962-style Merkle root is produced from the same ordered entries.","canonicalEntryFields":["index","type","sourceId","sourceVersion","timestamp","assetId","certificateId","projectId","payloadHash","sourceSnapshotHash","publicSummaryHash","privateEvidenceHash","signingKeyId","previousEntryHash","attestation","evidence","metadata"],"rootRule":"rootHash equals the last entryHash for the hash chain. merkleTree.rootHash equals the RFC6962-style Merkle tree hash over canonical entry pointers."},"witnessPolicy":{"minimumIndependentWitnesses":2,"configuredIndependentWitnesses":0,"satisfied":false,"status":"not_satisfied","reason":"Fork detection requires independent witnesses. Configure at least two witness endpoints, or one witness plus Rekor/TSA, before claiming CT-grade anti-fork assurance."},"publicationTargets":[{"type":"public_endpoint","status":"published","evidence":"Anchor manifest is available from a public VentureOS endpoint."},{"type":"github_commit","status":"not_configured","evidence":"Set TRANSPARENCY_ANCHOR_GITHUB_TOKEN and TRANSPARENCY_ANCHOR_GITHUB_REPOSITORY to publish this anchor to GitHub."},{"type":"external_witness","status":"not_configured","evidence":"Set TRANSPARENCY_ANCHOR_WITNESS_URL to publish this anchor to an independent witness."},{"type":"sigstore_rekor","status":"not_configured","evidence":"Set TRANSPARENCY_ANCHOR_REKOR_URL to submit signed root events to a Rekor-compatible log."},{"type":"timestamp_authority","status":"not_configured","evidence":"Set TRANSPARENCY_ANCHOR_TSA_URL to bind the signed root to an external timestamp authority."},{"type":"blockchain_anchor","status":"not_configured","evidence":"Set TRANSPARENCY_ANCHOR_BLOCKCHAIN_URL only when redundant blockchain anchoring is required."}]}}