VERIFIED (integrity 100/100) — all required checks satisfied
2026-02-28T05:05:35.855Z · commit 12a73e4efe72
What this proves
This release was checked along a chain of independent steps. Each step below is a separate, verifiable claim — you can re-run the whole chain yourself with the command at the bottom.
pass1. Signature
Signature verified against mcp-tool-shop (ci-shipcheck-2026)
pass2. Attestations
sbom.present: pass — Release includes SBOM attestation
provenance.present: pass — Release includes build provenance
license.audit: pass — All 0 component licenses are in the allowlist
security.scan: pass — No dependencies in SBOM; zero attack surface.
Check
Result
Reason
sbom.present
pass
Release includes SBOM attestation
provenance.present
pass
Release includes build provenance
license.audit
pass
All 0 component licenses are in the allowlist
security.scan
pass
No dependencies in SBOM; zero attack surface.
pending3. Anchor (XRPL)
Included in partition 2026-02-28 (Merkle root d9cc5dd2119c4fce…). Root committed; not yet anchored on-chain (awaiting the next XRPL anchor cycle).