new advisories work and features gaps work

docs/modules/findings-ledger/schema-catalog.md

@@ -73,3 +73,19 @@ Filters hash: `sha256(sortedQueryString)`; stored alongside fixtures for replaya
 - Golden fixtures: `src/Findings/StellaOps.Findings.Ledger/fixtures/golden/*.ndjson`.
 - Checksum manifest: `docs/modules/findings-ledger/golden-checksums.json`.
 - Offline verifier: `tools/LedgerReplayHarness/scripts/verify_export.py`.
+
+## 6) Rekor Entry Reference — `rekor.entry.ref.v1` (Sprint: SPRINT_20260112_004_FINDINGS)
+
+| Field | Type | Notes |
+| --- | --- | --- |
+| `logIndex` | `long?` | Position in the Rekor log. |
+| `logId` | `string?` | Log identifier (hex-encoded public key hash). |
+| `uuid` | `string?` | Unique entry identifier. |
+| `integratedTime` | `long?` | Unix epoch seconds when entry was integrated. |
+| `integratedTimeRfc3339` | `string?` (UTC ISO-8601) | RFC3339 formatted integrated time for display/sorting. |
+| `entryUrl` | `string?` | Full URL to the Rekor entry for UI linking (e.g., `https://rekor.sigstore.dev/api/v1/log/entries/{uuid}`). |
+
+**Usage:** Attached to `AttestationPointer` records and evidence graph signature metadata. The `integratedTimeRfc3339` field provides human-readable timestamps and deterministic sorting. The `entryUrl` enables direct linking from UI components.
+
+**Offline mode:** When operating in air-gapped environments, `entryUrl` may be null or point to a local Rekor mirror. The `integratedTime` remains authoritative for timestamp verification.
+