{
  "schema": "stellaops.replay.manifest@v2",
  "subject": "scan:myapp-123",
  "generatedAt": "2025-12-13T10:00:00Z",
  "hashAlg": "blake3",
  "artifacts": [
    {
      "kind": "richgraph",
      "uri": "cas://reachability/graphs/a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",
      "hash": "blake3:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",
      "dsseUri": "cas://reachability/graphs/a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2.dsse",
      "size": 24576,
      "mediaType": "application/json"
    },
    {
      "kind": "runtime-facts",
      "uri": "cas://reachability/runtime/sha256:xyz789abc123def456789012345678901234567890123456789012345678901234",
      "hash": "sha256:xyz789abc123def456789012345678901234567890123456789012345678901234",
      "size": 8192,
      "mediaType": "application/x-ndjson"
    },
    {
      "kind": "sbom",
      "uri": "cas://scanner-artifacts/scan-myapp-123/sbom.cdx.json",
      "hash": "sha256:def456abc789012345678901234567890123456789012345678901234567890123",
      "size": 102400,
      "mediaType": "application/vnd.cyclonedx+json"
    },
    {
      "kind": "reachability-fact",
      "uri": "cas://signals/facts/scan:myapp-123:pkg:maven/log4j:2.14.1:CVE-2021-44228",
      "hash": "sha256:e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6",
      "size": 4096,
      "mediaType": "application/json"
    }
  ],
  "analyzer": {
    "name": "scanner.java",
    "version": "1.2.0",
    "toolchain_digest": "sha256:7b9e8c6d5a4f3e2d1c0b9a8f7e6d5c4b3a2f1e0d9c8b7a6f5e4d3c2b1a0f9e8d"
  },
  "code_id_coverage": {
    "total_symbols": 1247,
    "with_code_id": 1189,
    "with_symbol_id": 1247,
    "stripped_symbols": 58,
    "coverage_pct": 95.3
  },
  "provenance": {
    "scanner_version": "1.2.0",
    "image_digest": "sha256:abc123def456789012345678901234567890123456789012345678901234abcd",
    "scan_started_at": "2025-12-13T09:30:00Z",
    "scan_completed_at": "2025-12-13T09:45:00Z",
    "runtime_observation_window": "24h",
    "runtime_probes_active": true
  },
  "determinism": {
    "manifest_hash": "blake3:fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
    "reproducible": true,
    "verified_at": "2025-12-13T10:00:00Z"
  }
}