{"schema_version":"cds-attestation-v1","site":{"domain":"centennialsystems.com","build_sha":"be27b283ee45856466b1e36a49723b8c9836eaa1","build_sha_short":"be27b283ee45","build_time":"2026-09-27T05:15:32.693Z","next_version":"16.3.3","node_runtime_contract":">=20.20.1 <25","node_version":"v22.22.3","ssl_issuer":"Let's Encrypt (Vercel-managed)","node_version_scope":"prebuilt-build","vercel_node_function_runtime":"nodejs24.x","vercel_python_function_runtime":"python3.12"},"products":[{"attestation_status":"registry-backed","name":"Deponent","pypi_package":"deponent","pypi_url":"https://pypi.org/project/deponent/","pypi_version":"0.1.3","license":"Apache-2.0","pypi_upload_time":"2026-09-26T17:50:27.613657Z","github_repo":"https://github.com/cjchanh/deponent","github_status":"verified","github_sha":"61f8989e9faed7508c90f4490b41e525a5657f6c","github_sha_short":"61f8989e9fae","github_commit_date":"2026-09-26T17:21:24Z","source_status":"working-public-link","evidence":"Public 0.1.3 release: PyPI artifacts and the v0.1.3 source tag verified.","boundary":"use_jail=False proves policy and ledger behavior, not OS confinement. Docker is not live-verified. The badge is not an exact source or binary signature. Tamper-evident is not tamper-proof. Research prototype; not a security accreditation."},{"attestation_status":"registry-backed","name":"mildoc-lint","pypi_package":"mildoc-lint","pypi_url":"https://pypi.org/project/mildoc-lint/","pypi_version":"0.3.0","license":"Apache-2.0","pypi_upload_time":"2026-06-21T06:35:01.583773Z","github_repo":"https://github.com/cjchanh/mildoc-lint","github_status":"verified","github_sha":"53867661e20439f3166584960a879cbac11aa426","github_sha_short":"53867661e204","github_commit_date":"2026-06-21T04:53:42Z","source_status":"working-public-link","evidence":"Public 0.3.0 release: PyPI artifacts and the v0.3.0 source tag verified.","boundary":"0.3.0 predates the packaging fix on main (34c654d), which is not yet released. Public CI on main is passing (last run 2026-08-12)."},{"attestation_status":"registry-backed","name":"Sworncode","pypi_package":"sworncode","pypi_url":"https://pypi.org/project/sworncode/","pypi_version":"0.4.1","license":"Apache-2.0","pypi_upload_time":"2026-09-05T05:16:08.839495Z","github_repo":"https://github.com/cjchanh/sworn","github_status":"verified","github_sha":"89c1ec4731b15964e9998adb366f675ba7fb0947","github_sha_short":"89c1ec4731b1","github_commit_date":"2026-09-05T04:15:31Z","source_status":"working-public-link","evidence":"Published distribution 0.4.1; public source repository verified at the observed SHA.","boundary":"PyPI 0.4.1 metadata points at the current product page and the public source repository. No Sworn success or clean fail-closed status is claimed."},{"attestation_status":"registry-partial","name":"Fleet Watch","pypi_package":"fleet-watch","pypi_url":"https://pypi.org/project/fleet-watch/","pypi_version":"0.3.0","license":"MIT","pypi_upload_time":"2026-09-09T02:31:47.816400Z","github_repo":"https://github.com/cjchanh/fleet-watch","github_status":"unavailable","github_sha":"unavailable","github_sha_short":"unavailable","github_commit_date":"unavailable","source_status":"working-public-link","evidence":"Published distribution 0.3.0 verified on PyPI. The release has no source tag, so no source commit is attested.","boundary":"Public source; no independent validation, certification, or production-deployment claim is made."}],"non_registry_attestation_states":[{"surface":"Governed Agent Kernel","state":"research","note":"Standard: https://github.com/cjchanh/gak-conformance-standard · observed source SHA 80f491123a532b4055e58ca3de26054ecbbeaaf2. The public v1 Deponent badge is reproducible. Published v1.1 author-built certifications have zero third-party verdicts, fail current clean consistency checks, and lack exact code/source binding; published / not independently reproducible."},{"surface":"Archivist","state":"external-only","note":"External product authority; public CDS receipt pending SBOM/binary attestation."}],"links":{"receipts_page":"https://centennialsystems.com/receipts","security_txt":"https://centennialsystems.com/.well-known/security.txt","sitemap":"https://centennialsystems.com/sitemap.xml"}}