artifact_type: replay_command
sample_status: synthetic_illustrative
replay_command: gosentrix replay --decision-fingerprint sha256:7f8a9b...e3d2c1 --evidence-snapshot gosentrix:bom:payment-service:2.4.1@build-8842 --policy-version v1.3.2 --verify-signature
decision_fingerprint: sha256:7f8a9b...e3d2c1
evidence_snapshot:
  bom_reference: gosentrix:bom:payment-service:2.4.1@build-8842
  scanner_results:
    - tool: primary_sast
      high_findings: 0
      critical_findings: 0
      freshness_hours: 4
    - tool: container_scan
      critical_findings: 0
      freshness_hours: 18
  runtime_corroboration:
    source: runtime_telemetry
    status: no_exposure_observed
policy_version: v1.3.2
policy_digest: sha256:a1b2c3...f4e5d6
freshness_state: fresh
trust_state: qualified_and_corroborated
dsse_envelope:
  payload_type: application/vnd.gosentrix.replay+json
  signatures:
    - keyid: replay-signer-2026
      sig: '...'
downgrade_reason_codes: []
expected_outcome: Proceed