{"bundleSchema":"d0-proof-bundle/1.0.0","attestationSchema":"d0-attestation/1","generatedAt":"2026-10-12T16:46:03.179Z","scan":{"id":"0fc016f0-902a-4458-9cf7-83024d941a45","name":"chalk","version":"6.0.1","artifactSha256":"22a5b05d62a304c950f24dedb466ea07fb4b458e58bb37b2fe2c69ed2c9ba6c3","registry":"https://registry.npmjs.org"},"registry":{"version":1,"commitment":"2ddcedcd2fda9ffcea5b63845d9e20814dc6dbb8b753628d4536c450339cf448","entries":[{"publicKeyHex":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","publicKeyDer":"MCowBQYDK2VwAyEApce2HUzbVqea6dv6s4TRzKDEVJ0g2kDHMxOjTfxe3pA=","role":"static_lifecycle","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"},{"publicKeyHex":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","publicKeyDer":"MCowBQYDK2VwAyEAiA+wraoswYh4XpV/7pZs+TmkxXLTcJIcFjUtlVqLd7s=","role":"dependency_advisory","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"},{"publicKeyHex":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","publicKeyDer":"MCowBQYDK2VwAyEA//GJlJ+ayirIZ5o08DMkVqRn2rLfdmz9Mj5awg4usRU=","role":"artifact_integrity","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"}],"storage":"off-chain local registry, anchored by commitment","onChainProgramDeployed":false,"operator":"local-operator (single machine)"},"scanners":[{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"0fc016f0-902a-4458-9cf7-83024d941a45","resolvedName":"chalk","resolvedVersion":"6.0.1","artifactSha256":"22a5b05d62a304c950f24dedb466ea07fb4b458e58bb37b2fe2c69ed2c9ba6c3","scannerPublicKey":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","scannerRole":"static_lifecycle","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791823563179},"signature":"9e69b9e9da41355c228228e2b1f38e81a0127cf87b9d27dd94ef0a562520f28681718bca50de923552b68ddf738c89cb9fa45e9579ceea8a5820b76827ac7c01"},{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"0fc016f0-902a-4458-9cf7-83024d941a45","resolvedName":"chalk","resolvedVersion":"6.0.1","artifactSha256":"22a5b05d62a304c950f24dedb466ea07fb4b458e58bb37b2fe2c69ed2c9ba6c3","scannerPublicKey":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","scannerRole":"dependency_advisory","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791823563179},"signature":"cf8a6e33daa7341a145a7f7d7cef50a9190b40caa8d2911661aa8c01ab93fc4fa60676b3d30140228c15ecfc8e21e175a0ac1891e041ae206e7cc5238a157507"},{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"0fc016f0-902a-4458-9cf7-83024d941a45","resolvedName":"chalk","resolvedVersion":"6.0.1","artifactSha256":"22a5b05d62a304c950f24dedb466ea07fb4b458e58bb37b2fe2c69ed2c9ba6c3","scannerPublicKey":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","scannerRole":"artifact_integrity","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791823563179},"signature":"27acc843726155e321895ef9ae2121ebb99a6f451e47d539a2305eb84b44da130dfd9ceb28f02e3e23eb77f25147721596fdc0ef0f4173498c6c15e263e6db03"}],"consensus":{"verified":true,"result":"allow","quorumRequired":3,"quorumMet":3,"policyVersion":"d0-consensus/1.0.0","votes":[{"role":"static_lifecycle","publicKeyHex":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"},{"role":"dependency_advisory","publicKeyHex":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"},{"role":"artifact_integrity","publicKeyHex":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"}],"rejected":[],"unavailableRoles":[],"rationale":"All three scanner roles independently returned ALLOW with valid signatures.","blockOverride":false},"attestation":{"schemaVersion":"d0-attestation/1","mechanism":"spl-memo-wallet","mechanismLabel":"Solana Devnet commitment anchored via Memo","cluster":"devnet","commitmentHash":"b5e2e82df5031c885ed57e212985f9ff3b909e2ff2abf33b4413de0e11f77b25","scanId":"0fc016f0-902a-4458-9cf7-83024d941a45","artifactSha256":"22a5b05d62a304c950f24dedb466ea07fb4b458e58bb37b2fe2c69ed2c9ba6c3","status":"confirmed","transactionSignature":"4EakfdB6Gfyqfm9HSdyR14FgTu4zuaJaBpV6wm1HtAo35ypU4HCWdHwXjVvpZwwevpXf9Mq5nr4gDDTcKMPAFzVh","slot":510328701,"confirmationStatus":"confirmed","blockTime":1791823626,"explorerUrl":"https://explorer.solana.com/tx/4EakfdB6Gfyqfm9HSdyR14FgTu4zuaJaBpV6wm1HtAo35ypU4HCWdHwXjVvpZwwevpXf9Mq5nr4gDDTcKMPAFzVh?cluster=devnet","submittedAt":"2026-10-12T16:47:05.711Z","confirmedAt":"2026-10-12T16:47:08.889Z","confirmed":true,"error":null,"memoData":"D0/d0-attestation/1 | c=b5e2e82df5031c885ed57e212985f9ff3b909e2ff2abf33b4413de0e11f77b25 | scan=0fc016f0-902a-4458-9cf7-83024d941a45 | artifact=22a5b05d62a304c950f24dedb466ea07fb4b458e58bb37b2fe2c69ed2c9ba6c3 | consensus=allow","memoProgramId":"MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr","idempotencyKey":"0ecea86084928fb6a97d3ce1c3e27405"},"commitment":"b5e2e82df5031c885ed57e212985f9ff3b909e2ff2abf33b4413de0e11f77b25","memoData":"D0/d0-attestation/1 | c=b5e2e82df5031c885ed57e212985f9ff3b909e2ff2abf33b4413de0e11f77b25 | scan=0fc016f0-902a-4458-9cf7-83024d941a45 | artifact=22a5b05d62a304c950f24dedb466ea07fb4b458e58bb37b2fe2c69ed2c9ba6c3 | consensus=allow","expectedMemoProgramId":"MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr","cluster":"devnet","trustModel":{"independentOperators":false,"note":"All scanner keys in this bundle are controlled by a single operator on a single host. Signatures prove internal consistency and tamper-evidence, not independent third-party verification or Byzantine fault tolerance."}}