VERIFIED (integrity 100/100) — all required checks satisfied
2026-06-21T05:11:51.134Z · commit cc895b5249e4
What this proves
This release was checked along a chain of independent steps. Each step below is a separate, verifiable claim — you can re-run the whole chain yourself with the command at the bottom.
pass1. Signature
Signature pass.
pass2. Attestations
sbom.present: pass — Release includes SBOM attestation
provenance.present: pass — Release includes build provenance
license.audit: unscored — SBOM attestation carries no sha256 digest; cannot bind license audit to fetched SBOM bytes. No assurance credit.
security.scan: unscored — SBOM attestation carries no sha256 digest; cannot bind trust to fetched SBOM bytes. No assurance credit.
repro.build: unscored — Build/clone failed: Docker build failed for mcp-tool-shop-org/repomesh@v2.2.0 in node:22-bookworm: Command failed: docker run --rm -v /tmp/repro-S9H21W/source:/w -w /w node:22-bookworm sh -c npm ci && npm run build && np
Check
Result
Reason
sbom.present
pass
Release includes SBOM attestation
provenance.present
pass
Release includes build provenance
license.audit
unscored
SBOM attestation carries no sha256 digest; cannot bind license audit to fetched SBOM bytes. No assurance credit.
security.scan
unscored
SBOM attestation carries no sha256 digest; cannot bind trust to fetched SBOM bytes. No assurance credit.
repro.build
unscored
Build/clone failed: Docker build failed for mcp-tool-shop-org/repomesh@v2.2.0 in node:22-bookworm: Command failed: docker run --rm -v /tmp/repro-S9H21W/source:/w -w /w node:22-bookworm sh -c npm ci && npm run build && np
pending3. Anchor (XRPL)
Included in partition all (Merkle root 3dc9890a775cae6d…). Root committed; not yet anchored on-chain (awaiting the next XRPL anchor cycle).