{
  "artifact_v1": "oci://harbor.blog-harbor.svc.cluster.local/fulfillment/shipments@sha256:1f729335ce618fe83366cb5133cf35209da7adaa05e6d13071a0a5122e044ff2",
  "artifact_v2": "oci://harbor.blog-harbor.svc.cluster.local/fulfillment/shipments@sha256:4d5e619a35731d7c09422fda8e52c217330d609d12964e87362243a0331cd62c",
  "checks": [
    "Private Harbor over verified HTTPS",
    "Anonymous pull rejected with HTTP 401",
    "Missing client CA rejected with x509 error",
    "Malformed operator CA grant rejected; corrected sha256-prefixed grant accepted",
    "Tag promotion preserved manifest digest",
    "Original payload hash matched before and after tag movement",
    "Pinned operator remained on v1 after tag moved to v2",
    "Explicit v2 reference produced one-column plan requiring approval",
    "Approval consumed and current-generation convergence observed after apply",
    "Existing shipment updated with tracking code"
  ],
  "cli_commands_sha256": [
    "02e8af869d17f76ea56d10d683e2ffecb5e8be887a2416282390bd825ba73784",
    "d85234fc3722cbb4f0e98a48c5064029757a01b5f0760f4c6b8a7e9b67cd667c",
    "e1d24349a66387a00869572765beaeae94f212ede973053ca00b5d37369cf491",
    "e690a287b1802eda9b524fd85857f00b6b846c61f7c73989ec0f72b1a6180c8b",
    "a6c82dbe0f718da71e149bb02df04cbb478093f5474a8e9e613c159be0dc7de0",
    "8af304c3c5f4215926373ec46efcbeac03cedae11584adbf0394e3f3e3bbfdda",
    "3b40fd4f4e27004c940f2376e5be426bf8baaa1733f33fbd8cd23c9b25c6745e",
    "d8e4af6176140b25e841643f6c7cdd272acac5d67301359f6c804f134b4e9833",
    "e70e92bb35a896469dc24d92c9fc41a6123074750feadd128551306efd0c3fcb",
    "ee8b236c293c7eade87dfb06e5f4a6c407e9e55717ee31e440d37e6b8c6ce7d3",
    "e1d24349a66387a00869572765beaeae94f212ede973053ca00b5d37369cf491",
    "e43d7e3fd815912d15bb23621206ab47d53f99d51ce1c17f4682743bbdd27864",
    "e70e92bb35a896469dc24d92c9fc41a6123074750feadd128551306efd0c3fcb",
    "7f388aa6958d36e39c990c18b47f65fe230225b05954c22478afe0d878d79831",
    "05188e97a5bca148f59748a3e9efb6129600527ff5c215b975f929439deb0586",
    "6d826e1e5c8f156c6e8bc1791804a37e18a66b4a488f9116c704a5295d2ecc4c",
    "c3e03b3359780425ecac5938f29e0a37fb0b8bb8fa44e737404a8ef0e63f31f8"
  ],
  "files_sha256": {
    "README.md": "faf0925a307f1a21f6b64dd04f68f1030e0be9661bd59c2c864dc38e4e5bf098",
    "application-query.sql": "7eb3836752643f683f54eaa6d1deee4df73029665032fe739b6ee080d6731b26",
    "approval.json": "413787eaff2e80b56a628de92e9c5782ab49698aa10583f7187cedf109d82f4f",
    "columns.sql": "ce2c32ff4220c82d87e96ee389aca41209d586182312de9558e90e7dec418f49",
    "desired.yaml": "f85bc71df6b4e6126edeea2ea1290adb142d3793c564f1cdf0231a0c1c04fee9",
    "expected/plan.sql": "3281bbbaa37ade96be013b1fa3d2842987442945da8d90732ae7b641be89fbcb",
    "expected/published-v1.txt": "7fb0248656fce0e1d8d02f2a2016252a4e3b1140580346b5e8a04f802ed3caf9",
    "expected/tag-v2.txt": "072229afc933563015cdbd8759e83c4c837817a65fb340555a00942446124990",
    "measured/anonymous-pull.txt": "6bea65cc1d9e37125cf93321e5bea6242c6acb59f70a263938e4e589538a8fad",
    "measured/application-query.txt": "bde01d3b5fc446475db5cf9bc069739f832d9f8765906c395015d13413e23fe0",
    "measured/approval-consumed.json": "8a1ab3af5bf1f2d648429598d4f4f4712b221b138118803c5cdc68c69479e0b0",
    "measured/approve-v2.txt": "6636fdc9b994dd99496d868a707aa01470182634a64937b6029579916a125b83",
    "measured/capabilities.json": "5905333bb8a620c423da5ec8ae297d607997a2ecf5b973833776f7ae70a9b33b",
    "measured/columns-after-tag-move.txt": "be6d916f2564d70b5ecbfd92dc60355f18cd168390656fb726c1171970b0e06c",
    "measured/commands.json": "ca7794187b7d94544b34a40cfef729eedbf7bc6b9a512830b85876b65a424a9c",
    "measured/harbor-runtime.json": "5cdc7be33b82ec12822a43501983d62bbda648decc9a67b7ca26e1994bd4e08e",
    "measured/inspect-v1.json": "191b2e26c566ea0104b50f205bf4ab61ea7bb0cf3e4aadedc5d26c0bd4e3b241",
    "measured/inspect-v2.json": "d52c0111e241c388d0fb5a2f25ccb1f6ed1bb48d070958c1ce0be3cf20217109",
    "measured/lab-ca.crt.txt": "6b0503a94723f60eb35b94b77afadafe90e2d9863c14c2663c4714286d6593fa",
    "measured/login.txt": "17177ad301298c41e609848b7abc85b9a04282300b9393a0d34a1d777bcdae51",
    "measured/operator-after-tag-move.json": "d2ba731c0b0c1ddd02cb82dda956021df2d2e2df355b1e5baff0755794acf4fe",
    "measured/operator-awaiting-v2.json": "2e11c4c6bbbf36979c1b7e2f4e856df7a5ca868473877b7839921750cc587fe7",
    "measured/operator-commands.json": "1de85a61bc3f3e2e5aa49d4321827f4d9aa8dedbf7787b79fac60975ec21c45c",
    "measured/operator-converged-v2.json": "33d9efa3b3016bfc6bf6624af91ec2279520dd7a06ff845ae2f555d45cbae3e7",
    "measured/operator-invalid-ca-grant.json": "4dd07d177a8c1536a24c4a4bef7680130ce681d5fc9694e55e62db8b76a406aa",
    "measured/pin-v2.txt": "0c79229d7047ccbe69859717669448db776e93370a98f5d2d8383b84a2ded3ec",
    "measured/ptah-version.txt": "81254e8402d4fed03f447b4e3e15093cd371db8106fa64380b1a9aaa1c061921",
    "measured/pull-v1.txt": "30c58440344d050174e01835311c306015af05df12b3cd8b68d0e656642d19f1",
    "measured/pulled-v1-sha256.txt": "3be2ecfb6e3dcd975f9d66bffb24558c3ffcd2c2cb5a6cbfa41e50a2cd797f5b",
    "measured/push-v1.txt": "66d73291d3481c30ed89e7138f5b3e896b93f6f372f6a3b6c5a57707d3d5d3b6",
    "measured/push-v2.txt": "fdd90095b75b2ab70e80321c8edef0c27083010cd605d1ad9d21056340c4dd92",
    "measured/read-status.txt": "5056839f9d5f1f0a283ee9793a2d28f4b1e936a9f180d06f27ae15fff9821ee5",
    "measured/rendered-v1.txt": "c31e688f9b660e7b80eb56b92f862ca9949a73bba6a9375bb24beead63f72383",
    "measured/rendered-v2.txt": "da032fcfad71d539bf81ea9edb164b5b8fe20bd638c5cd1888a81f59f1de8a02",
    "measured/resolve-production.txt": "7cbe759e565fc4f83cf7bff6db7d8bd123b7d31ec99e1d293a3200a380d3245f",
    "measured/resolve-v1.txt": "768c6521b0a5d4f04b18221dd943e57e44128713406a71704ab93b68b404c733",
    "measured/review-v2.txt": "3281bbbaa37ade96be013b1fa3d2842987442945da8d90732ae7b641be89fbcb",
    "measured/tag-production-v1.txt": "ebac1ea8fe78aa5872c1e94b36dfe4b63ae6c39538ced4ee2183c604bf6a4e4b",
    "measured/tag-production-v2.txt": "072229afc933563015cdbd8759e83c4c837817a65fb340555a00942446124990",
    "measured/untrusted-ca.txt": "f553f3d3289acc56132f659d1ec469b8d274c7492e1767764cfa07a489d7ea2e",
    "operator-robot-request.json": "329e8ce635c779cf1f60a2a3af12e0cd7cd29fcaf46825197fcd3efe6758e4dd",
    "pin-v1.json": "911b9ae1ed682aa1ea9dfcb210a07869fa4e3f53206cdbafb2acc0eec0408b85",
    "pin-v2.json": "77485fb4f697aed0f9325ac3ae18e6c8f0a58ae85f07433dadc5ed6ccd977cb3",
    "publisher-robot-request.json": "9ae53560c93c064c1853083aeb8514c19a5b16f12b5374264a519d8e9a07b372",
    "schema-v1.sql": "d9dd10a6c380bccffd17bd99b16e2bb683a2344efd6bea7d57ea0fd4801ee7d1",
    "schema-v2.sql": "4134ad0c120acbff34809e59774450c5afbba7c8ada03f110e53e2747592b723",
    "shipments-v1.json": "dadab043adc9da16b739fb7b90556fdea7f2d5527b5b88075c922eb68c5032d0",
    "shipments-v2.json": "d4a219c0662b4d9017ecad482bf8aec091144c923fd55553923e641504cc4809",
    "values.yaml": "cab86845691809633c5bb9b2eefc2d0a64b04fb1d4962ef7bde38605a860a89c"
  },
  "harbor_chart": "1.19.2",
  "harbor_version": "2.15.2",
  "operator_commit": "6d72944c477c851a19d2662eb345ea313c921dd0",
  "output_normalization": {
    "raw_sha256": {
      "measured/application-query.txt": "bde01d3b5fc446475db5cf9bc069739f832d9f8765906c395015d13413e23fe0",
      "measured/operator-commands.json": "1de85a61bc3f3e2e5aa49d4321827f4d9aa8dedbf7787b79fac60975ec21c45c"
    },
    "rule": "Trailing whitespace removed; local fixture directory replaced with /examples/."
  },
  "ptah_version": "0.8.0",
  "scope": "Disposable Harbor with persistence and scanning disabled. No signature, registry retention, high availability, or recovery claims.",
  "verified_on": "2026-09-23"
}