Artifacts and digests
Artifacts and digests
Section titled “Artifacts and digests”The local protocol bundle contains 194 exact files with
tree digest sha256:95a16adaab17df2626db0f35b470723558637fc496840ddd837ce68fbe234875. The protocol pin SHA-256 is
bfb11b76a989b9949844d3380c3b01cefcde6c01259167b922b6f30d151bac31 and the pinned protocol bundle
SHA-256 is c95fc8f8334947dacf51a2c6e84d9b13f5b39b7d3827591569a1e2c5acfe47d7.
| Surface | Files or artifacts | Digest |
|---|---|---|
| Schemas | 22 | sha256:941a5a19b8664207f1ff48b799219c2f981ecd491a5cca527d586028d976ec76 |
| Structural conformance | 59 files / 58 vectors | sha256:2362acd8345e5860e605ed06984f1673a1ea0a00e76c1fe00fed222326782f24 |
| Cryptography | 98 | sha256:5eade516e4bc5dcf04477727ebcccd11f33348b2d9135fb6fe0365c6e6cc2ea3 |
| Admission | 19 | sha256:39971bfafb68ef6c18f9026220cccc4f023fd4d5c8074f8ff0276cb1129cd0a0 |
Digest semantics
Section titled “Digest semantics”Individual manifest entries bind exact file bytes with lower-case SHA-256. The
cryptography and Admission top-level artifactDigest values remove exactly that
member, serialize the remaining manifest with RFC 8785 JCS, and hash the
canonical bytes. Their declared artifact entries transitively bind every named
file.
The website bundle tree digest additionally binds each canonical relative path, a NUL separator, the exact file bytes, and a trailing NUL separator in sorted path order. This prevents two different artifact layouts from sharing an identity merely because their concatenated bytes match.