{"evidence":{"claim_boundary":["The lock is resolved and reviewed dependency metadata, not a signed SBOM.","Wheel/source artifact hashes and the final OCI image digest remain release gates.","This does not establish vulnerability absence or production approval."],"direct_requirement_count":14,"docker_uses_exact_lock":true,"evidence_id":"RUNTIME_DEPENDENCY_LOCK_20260829","generated_at_utc":"2026-08-29T07:21:24.305126+00:00","lock_sha256":"74352a806768af7a9a07c43aad6e77cf21e588bec79bc51a3373154f0bf898fa","locked_package_count":43,"missing_direct_packages":[],"python_base":"python:3.12-slim (digest must be pinned by release automation)","status":"PASS","verification_state":"RELEASE_MANIFEST_CHECK"},"limitations":["The lock is resolved and reviewed dependency metadata, not a signed SBOM.","Wheel/source artifact hashes and the final OCI image digest remain release gates.","This does not establish vulnerability absence or production approval."],"pack_type":"EcoKure runtime dependency lock EvidencePack","verification_state":"RELEASE_MANIFEST_CHECK"}