artifact_type: release_decision
sample_status: synthetic_illustrative
decision_fingerprint: sha256:7f8a9b...e3d2c1
evidence_snapshot:
  bom_reference: gosentrix:bom:payment-service:2.4.1@build-8842
  scanner_results:
    - tool: primary_sast
      high_findings: 0
      critical_findings: 0
      freshness_hours: 4
    - tool: container_scan
      critical_findings: 0
      freshness_hours: 18
  ai_provenance:
    ai_generated_lines: 12
    reviewer_attestation: approved
  runtime_corroboration:
    source: runtime_telemetry
    status: no_exposure_observed
policy_version: v1.3.2
policy_digest: sha256:a1b2c3...f4e5d6
freshness_state: fresh
trust_state: qualified_and_corroborated
dsse_envelope:
  payload_type: application/vnd.gosentrix.decision+json
  signatures:
    - keyid: prod-signer-2026
      sig: '...'
outcome: Proceed
downgrade_reason_codes: []
replay_command: gosentrix replay --decision-fingerprint sha256:7f8a9b...e3d2c1 --evidence-snapshot gosentrix:bom:payment-service:2.4.1@build-8842 --policy-version v1.3.2