{"evidence":{"claim_boundary":["Hashes bind this release candidate's source inputs; they are not a signed attestation.","The OCI image digest, signature and registry provenance remain pending until an image is built and reviewed.","This does not establish production approval, vulnerability absence or regulatory compliance."],"dependency_lock_sha256":"74352a806768af7a9a07c43aad6e77cf21e588bec79bc51a3373154f0bf898fa","evidence_id":"RELEASE_INTEGRITY_MANIFEST_20260829","files":{".github/workflows/build-aws-image.yml":"e02c689899c886bad0fc7a72581d4694a0d8ccb46dee9889d02e8d032e5de4bd",".github/workflows/ci.yml":"8395dbbf2595b71601b11c1c9afcd6c6bdda87dd14985c01f4be2346fe2ea101","Dockerfile":"65bf643523c7297a9b9cc005f812c0e8ccb69a6c65cf06e721c4f0df7554bcf6","app.py":"cd7dccfb4a95b5ff3ede2e2966c1e12e49523019be1436b47848a23ceb7159b1","data/aws/kms_benchmark_20260829_refresh.json":"525e391523931459892137bf178e0aed25d6ae6074847be814c67dbb096b4ad2","data/aws/kms_benchmark_concurrent_2000_live_20260829.json":"95b2a7c6127ee48301410b8b3d710028b23e2a50ced240024bedabab44317979","data/aws/kms_benchmark_concurrent_live_20260829.json":"013f0e980792e173fb8fa45cf6c36474a0fa31104eb5bcc0e50dde44dec39ba5","data/aws/kms_capacity_curve_live_20260829.json":"b396664802c4f740c413ec13888bb99da5ed80d213e528c3086889bf7e1771f3","data/aws/kms_stability_32_live_20260829.json":"f554bee9579be0c233fdd056274bfaebc33116e7ceb4dc042b4c9555849cc154","data/aws/kms_stability_live_20260829.json":"dff84540b77f60dc986100f3a7b2dc3281cd0a277d4c855008b1cbf4f09433cd","data/aws/runtime_deployment_preflight_20260829.json":"b14ffe9945f32e5b9a27d0ef868d7aa7cf7c196bb0796ad33a7f113d00d9b1d0","data/benchmarks/customer_staging_acceptance_20260829.json":"5f5759e694c3d16e30618c35c3b2d2684a103d843c6183e9da2b1a358adea5ae","data/benchmarks/deployed_runtime_capacity_20260829.json":"33b7bb1462ec8f4180ca957136bf98ba4f1b4752357568c49f853702811e821e","data/benchmarks/deployed_runtime_capacity_32_20260829.json":"b31aaf79feec27087acefafd83645a39f686891b713917a578f64166774933b7","data/benchmarks/deployed_runtime_concurrency_profile_20260829.json":"d54c29df53155afd6fab96cad91fd4ca40097f643560896403010954de9022ec","data/benchmarks/deterministic_replay_matrix_20260829.json":"120e1522e3643e9ca38ac1e0e3941e5009e64c38f04fed91128e90597953a3fe","data/benchmarks/enterprise_pilot_2000_20260829.json":"feafa70cdaeb9b27231436ce6703e0183366723ae0ed7d4b76ee3f1884ce3f03","data/benchmarks/enterprise_pilot_20260829.json":"8d5780381588eb63a6d7118a0eee4fa69e9eb8e41f80bf712fe165c056074732","data/benchmarks/enterprise_validation_suite_20260829.json":"f9374a593b4b9449a6550d4982b7e5e493980f5a1a4231ba2b1bdba9ffd25e14","data/benchmarks/graph_scale_10m_20260829.json":"1d915e88bd3ceb3de4397c5ecc9d991d6f9360ce41c5fa787e890e010c477161","data/benchmarks/live_evidence_consistency_20260829.json":"7fafa456608edd7c5b5b5a0192e6fd929a6d3e6cdf2b6ac4ec55af77d5c19a6c","data/supply_chain/runtime_dependency_lock_20260829.json":"88eadb192cf843a16872d9dc4cc15dd6a1b9f0735dbe914502e6eaea569b9162","data/supply_chain/runtime_license_inventory_20260829.json":"828c3ba805caafde1f9a77fc4f5b686d0fad7ba9895bc9c0df9f3e12c5b5f4b7","data/supply_chain/runtime_sbom_20260829.json":"92c41c3f43e0060a20b5a357437d09516290e156690fd6f508c49636e07bcf57","data/supply_chain/runtime_vulnerability_audit_evidence_20260829.json":"431dddb6ed270d57c40533889e8a73279c23df477b7cb0befca82b8207013171","docs/AWS_DEPLOYMENT_AUTHORITY_REQUEST.md":"587846c54368ee3a33083ec59f9fbe2680d94dc5c59ddfd0bfd4432e95d1ff23","docs/GITHUB_AWS_OIDC_IMAGE_BUILDER.md":"4ac70c8d170a2004b1464beff2cdd812b685b5d6808f77fc46837eaa9b891cbe","docs/PRODUCTION_READINESS_RUNBOOK.md":"57aca3d94c85393de15a5f77a3f5e2798358d2d531be1006942ea9726dc702c8","infra/aws/README.md":"b031990181fc70ba1c9ecff60c3978978b6787e447ec11ad2f068f6373bbf629","infra/aws/ecr-image-builder-policy.json":"6b7fbffa21ef90a056cfe93d2c5a8fcff63145e0fc5de5f0d463067b526e4dc9","infra/aws/ecs-deployment-authority-policy.json":"cb5b6f73b63e263d655898677ad6f62b6c59f2cbf97a82e98f3d4fdb67c05c34","infra/aws/ecs-runtime.tf":"452313dd6194bd28b4a01794807ad3c749eaa3a3e77b62f0d4c7e05699796124","infra/aws/image-builder.tf":"335165ba521a70c01fb891056b13dd4dd4ffe7004c9d116b4bbeb140765849d9","infra/aws/outputs.tf":"796c3f0f563fa9aee10b527fcc4f458d680bb5cf10f1493bcca610646da86853","infra/aws/variables.tf":"02105d30d26a8144deb4a2d8c86b29681575163befb56e5dcfe9f1a51cf58a12","requirements.lock":"74352a806768af7a9a07c43aad6e77cf21e588bec79bc51a3373154f0bf898fa","requirements.txt":"ceb896598e2e1f0eeb5f610812e2aaf85089d28a497f25798d50ed229b2da0f4","scripts/aws_runtime_preflight.py":"3bbd69976968446ef1054c9907508a70c8b0d754525eb95c57db339204f86e26","scripts/generate_runtime_sbom.py":"4f44de32032f7ac6858e9625e9412db81d78a83486bf5fe473805925d5b0bff3","scripts/production_preflight.py":"3792cddadd1a20f1526c929d9ace7a2a7b7c01e5ecfa6ed4cf91263602ae22be","scripts/run_aws_kms_capacity_curve.py":"829f9204ede8fabe0a1495b825e744d2523f3857aff9d4f0bd632c08adac426b","scripts/run_aws_kms_concurrency_benchmark.py":"a31e56b11de93647c017a3b59d7c9cf5349f168dfd7bf803f755ab9f0951eeb3","scripts/run_aws_kms_stability_benchmark.py":"859a361cb56907bac39a570475fec4b4d875239632aa48467db6739678935380","scripts/run_customer_staging_acceptance.py":"25697aa161be5bb95975e70d68488726634de64fe82f31038a79b80406d34b47","scripts/run_deployed_runtime_capacity_benchmark.py":"6c63c8ed9e409bfc9a1d15424bb489bed048febef9465c6ee601bb03d2b6196b","scripts/run_deterministic_replay_matrix.py":"a782a37f78df37baa331dc34dd6aa39a1a14eb328f66d06f7f82245717dece9a","scripts/run_enterprise_validation_suite.py":"98eda0bba97cf8201df7e472812c003db49b6dad9672240b220c09ebe996f8b9","scripts/run_live_evidence_consistency_probe.py":"e1f9f27067f70c257491e2a6e4ef528bda9af42936a8bd351015e4c2eda79d22","scripts/run_runtime_load_profile.py":"c6fbe5ff9cd08c7ffe096a9e7f435e9ffacf35994148975cc0a76eda6f99c2f7","templates/deployment.html":"1cfdd674126cc78c53adf07923a8c583d1d0e5c839e494731393f696ecf665a6","templates/enterprise_handoff.html":"5f2fe4ccb60ef8fbb557e86b3e78e06259a5822a32190c1f2def05472f4d7b27","templates/proof_center.html":"e582226ba387eca568f49e98cc217797b8248fb18e06ba1e393dac13f88817bc","tests/test_production_preflight.py":"c13b6becffc4af97a236a7c09b6227c4f9a5cd896c8b334f1d1ed08361c2c0a9"},"generated_at_utc":"2026-08-29T12:15:26.497841+00:00","oci_image_digest":null,"sbom_sha256":"92c41c3f43e0060a20b5a357437d09516290e156690fd6f508c49636e07bcf57","source_commit":"b65e0807b16c6e8d22d890b884247e2df9bc0e1e","status":"PASS_RELEASE_INPUTS_HASHED","verification_state":"SOURCE_RELEASE_MANIFEST","vulnerability_audit_sha256":"431dddb6ed270d57c40533889e8a73279c23df477b7cb0befca82b8207013171"},"limitations":["Hashes bind this release candidate's source inputs; they are not a signed attestation.","The OCI image digest, signature and registry provenance remain pending until an image is built and reviewed.","This does not establish production approval, vulnerability absence or regulatory compliance."],"pack_type":"EcoKure release integrity manifest EvidencePack","verification_state":"SOURCE_RELEASE_MANIFEST"}