{
  "$schema": "https://forge.trustyu.ai/schemas/public-release-record/v1",
  "record_type": "forge.public-release-record/v1",
  "release": {
    "name": "FORGE Incubator 0.8.0",
    "tag": "forge-v0.8.0",
    "source_sha": "eae88cfe39c49e829b4ec4b624887403ff15bbb4",
    "published_at": "2026-07-17T14:42:47Z",
    "asset_count": 9,
    "visibility": "metadata-public-binaries-private"
  },
  "verification": {
    "algorithm": "Ed25519",
    "command_result": "verified",
    "verified_at": "2026-07-17T18:08:41Z",
    "public_key_der_sha256": "5eda28f4351f324763d548acb28abce5616a85800457ba824fb7f027bffe9851",
    "signed_payload": "SHA256SUMS",
    "signature_encoding": "base64"
  },
  "assets": [
    {"name": "compatibility-0.8.0.json", "sha256": "6a775afe6e9abb312b976fbc34c71252d78638cbbd64f47a18e0492f33dbd39e", "size": 1762, "public_body": false},
    {"name": "forge-release-signing-public.pem", "sha256": "9b257db6e5a17d283678c82b8c29f8743ea1dd7b0cba7ea5fe50c5f4e2e31d25", "size": 113, "public_body": true},
    {"name": "provenance.intoto.json", "sha256": "8481e3dedf1becb309ab8485b8a1bdcbd140147cb59e8b93fb4c96d6b61ee4d4", "size": 1553, "public_body": false},
    {"name": "SHA256SUMS", "sha256": "f0775a1c0dfbd25323d98c24924d204d78dcf4c7b80f06a90380208c9748d350", "size": 685, "public_body": true},
    {"name": "SHA256SUMS.sig", "sha256": "9f13af67976267c45cdc78949ea900d930ce4feeab1891ab283a5b3f87115d29", "size": 64, "public_body": true, "published_as": "SHA256SUMS.sig.b64"},
    {"name": "SUBJECT_SHA256SUMS", "sha256": "dd5e520aba8c4aa63c3b6bd87a5bff518e8bfcd23b4a2ca2f2924c07fa544b30", "size": 511, "public_body": false},
    {"name": "trustyu-forge-incubator-0.8.0.cdx.json", "sha256": "926233632b0dff1e94b64dd5c19180ac9ad9289a9a0d10bf438724b37e2c7d78", "size": 4077, "public_body": false},
    {"name": "trustyu_forge_incubator-0.8.0-py3-none-any.whl", "sha256": "eded05cb8706162c9d94e2946b713af3409429ec6536584edae73b119aca7974", "size": 118072, "public_body": false},
    {"name": "trustyu_forge_incubator-0.8.0.tar.gz", "sha256": "9c90d10491afe7e5a9891b768d3d19bec9bde2588acf9e3aeaeff83d8d8eb6c6", "size": 133014, "public_body": false}
  ],
  "limitations": [
    "This record proves the integrity and signature verification result of the published release metadata; it does not prove operational qualification of FORGE 3.0.",
    "The source repository and binary package bodies remain private and are not redistributed by this public record.",
    "No SLSA level, external adoption, Operational or Attested claim is made."
  ],
  "provenance": {
    "owner": "fernandoparreiras",
    "generated_with": "Codex",
    "session": "codex·SQ4",
    "source_issue": "needyuai/trustyu-jarvis-site#13"
  }
}