{
  "schema_version": "fasttool-evidence-publication-attestation/v1",
  "release_version": "0.3.0",
  "release_tag": "v0.3.0",
  "observed_at": "2026-07-29T19:21:00.000Z",
  "status": "PARTIAL",
  "canonical_distribution_channel": "fasttool_direct",
  "receipt_core_sha256": "6091fc311e4feaab2c91b8ca356255481f8fd82c547545f3663bb2c68bce267d",
  "channels": {
    "fasttool_direct": {
      "status": "PASS",
      "base_url": "https://fasttool.app/downloads/fasttool-evidence/v0.3.0/",
      "privacy_boundary": "Static download only; no account or upload is required."
    },
    "github_release": {
      "status": "BLOCK",
      "repository_url": "https://github.com/rd0-x/fasttool-evidence",
      "release_url": "https://github.com/rd0-x/fasttool-evidence/releases/tag/v0.3.0",
      "commit_sha": "eb4f3b4c7f1348e0f4b18820de4b43a5c5032ab3",
      "reason": "The release object exists for the authenticated owner, but anonymous repository and asset requests return HTTP 404. It is not claimed as a public channel."
    },
    "github_actions": {
      "status": "BLOCK",
      "reason": "GitHub returned HTTP 422: Actions has been disabled for this user. Hosted-run evidence is unavailable."
    },
    "github_marketplace": {
      "status": "INDETERMINATE",
      "reason": "No anonymously verifiable Marketplace listing exists."
    },
    "npm": {
      "status": "INDETERMINATE",
      "package": "@fasttool/evidence",
      "version": "0.3.0",
      "reason": "The package version is not present in the public npm registry."
    }
  },
  "artifacts": [
    {
      "name": "fasttool-evidence-cli-v0.3.0.tgz",
      "url": "https://fasttool.app/downloads/fasttool-evidence/v0.3.0/fasttool-evidence-cli-v0.3.0.tgz",
      "byte_length": 168215,
      "sha256": "a2233b702af5ad82ac6fcd4e9b22eaa5702d1b6157ebc8f5e2708198d702e505"
    },
    {
      "name": "fasttool-evidence-action-v0.3.0.zip",
      "url": "https://fasttool.app/downloads/fasttool-evidence/v0.3.0/fasttool-evidence-action-v0.3.0.zip",
      "byte_length": 369896,
      "sha256": "1cba40b4ad2ccfa1b8345ae93e0cb42862b360896da843f4bd414c15fd6c0584"
    },
    {
      "name": "README.md",
      "url": "https://fasttool.app/downloads/fasttool-evidence/v0.3.0/README.md",
      "byte_length": 1542,
      "sha256": "29a3bed91563139a4b33bd6f9656243195c31bc802386dc4e78a3c4c88b53887"
    },
    {
      "name": "fasttool-evidence-v0.3.0-SHA256SUMS.txt",
      "url": "https://fasttool.app/downloads/fasttool-evidence/v0.3.0/fasttool-evidence-v0.3.0-SHA256SUMS.txt",
      "byte_length": 502,
      "sha256": "c85558a40095071333888d7f1aa8c3a64747b8c8e64ca0ebbcb8f7eb3b4b84b2"
    },
    {
      "name": "fasttool-evidence-v0.3.0-release-manifest.json",
      "url": "https://fasttool.app/downloads/fasttool-evidence/v0.3.0/fasttool-evidence-v0.3.0-release-manifest.json",
      "byte_length": 2080,
      "sha256": "33fba6cdd1fcc31c40bc3951d86bffacd1d263a5a84dcb41596c47a3a2d688f6"
    },
    {
      "name": "fasttool-evidence-v0.3.0-release-receipt.json",
      "url": "https://fasttool.app/downloads/fasttool-evidence/v0.3.0/fasttool-evidence-v0.3.0-release-receipt.json",
      "byte_length": 4073,
      "sha256": "fd7627a535c6eecb302a06365d5e36791e0c8c808c5248727b022f28305b3484"
    }
  ],
  "limits": [
    "A PASS channel proves observed byte availability and hash parity, not software security, authorship or legal admissibility.",
    "GitHub, GitHub Actions, Marketplace and npm must each pass anonymous external verification before FastTool claims them as public distribution channels."
  ]
}