Files
git.stella-ops.org/out/mirror/thin/mirror-thin-v1.bundle.dsse.json
StellaOps Bot 47168fec38 feat: Add VEX compact fixture and implement offline verifier for Findings Ledger exports
- Introduced a new VEX compact fixture for testing purposes.
- Implemented `verify_export.py` script to validate Findings Ledger exports, ensuring deterministic ordering and applying redaction manifests.
- Added a lightweight stub `HarnessRunner` for unit tests to validate ledger hashing expectations.
- Documented tasks related to the Mirror Creator.
- Created models for entropy signals and implemented the `EntropyPenaltyCalculator` to compute penalties based on scanner outputs.
- Developed unit tests for `EntropyPenaltyCalculator` to ensure correct penalty calculations and handling of edge cases.
- Added tests for symbol ID normalization in the reachability scanner.
- Enhanced console status service with comprehensive unit tests for connection handling and error recovery.
- Included Cosign tool version 2.6.0 with checksums for various platforms.
2025-12-02 21:08:01 +02:00

11 lines
6.0 KiB
JSON

{
"payload": "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",
"payloadType": "application/vnd.stellaops.mirror.bundle+json",
"signatures": [
{
"keyid": "db9928babf3aeb817ccdcd0f6a6688f8395b00d0e42966e32e706931b5301fc8",
"sig": "WimfcZH0NtgBn9d3vaVA39f2tqIEqEJXpzPNt7c6Pf5wbHyYwHVCic9iRcvqMhGOzSmcPmQAckyrq6rm0WkWBA"
}
]
}