Evidence bundle · 2026-07-15T15:01:36Z

FORGE Observer

Public post-promotion snapshot of CRM and Hub, preserved byte-for-byte with detached signature Ed25519, public key and checksums.

Engineering Harness — qualification in progress

11changes accepted

2 daysfull window

2 / 5EVD-01 · 40%

2 / 9VER-01 · 22.22%

Decision: shadow. operational_claim_allowed=false. Cryptographic integrity does not transform failed event, missing evidence, or unavailable metrics into compliance.

Featured events

Hub #678provenance failed · evidence-error

Hub #683provenance passed · non-compliant aggregate

CRM #1621provenance passed aggregate evidence-error

Hub #688provenance failed · evidence-error

Verifiable files

JSON Snapshot Signature Ed25519 Public key SHA256SUMS

Object	SHA-256
Published JSON	`b750bc99f06205e804344cec1c7f2ba9b6c2e4cf924f46bff0edf9dcb6a29683`
Internal canonical digest	`b2e1d7b38a9a00bbdf56992c2faaece8eadfb98eee09f3e0693852e99f67cac0`
Signature	`e2df13d00f51270f6a894f8781e5bc0e8d60b87e86e5cab63b2f8e35d5246c24`
public PEM	`f3224141b71cdbdeda1886fc8d92115d22e146215178478b53900129ddbd5603`
Key Fingerprint DER	`2ef7e6ec084d581f8acb6a1328efe863906b9ecc8f7b84cb4d814185e8c16bba`
GitHub artifact archive	`02fd2c2446e3df4224478481a38cc86a71a9855fd6d24c3f8fea46ee4a3ee5a5`

Spot check

sha256sum -c SHA256SUMS
openssl pkeyutl -verify -rawin \
  -pubin -inkey forge-observer-signing-public.pem \
  -sigfile 20260715T150136Z-b2e1d7b38a9a00bb.json.sig \
  -in 20260715T150136Z-b2e1d7b38a9a00bb.json

Execution source: trustyu-infra run 29426214250, artifact 8347389133. Window: 2026-07-13T00:00:00Z–2026-07-15T15:01:36Z. The bundle is engineering evidence; It is not independent certification.