{ "id": "ulid-01J00000000000000000000000", "tenant": "urn:tenant:00000000-0000-0000-0000-000000000000", "subject": "purl:pkg:maven/org.example/app@1.2.3", "signal_type": "reachability", "source": "signals", "confidence": 0.92, "evidence": [ { "kind": "linkset", "uri": "cas://linksets/advisory-ghsa-1234", "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "scope": "tenant:default" } ], "provenance": { "pipeline": "git:abcd1234", "inputs": ["sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"], "signer": "sigkey:policy", "transparency": { "rekor_uuid": null, "skip_reason": "offline" } }, "created": "2025-11-19T00:00:00Z" }