{"bundleSchema":"d0-proof-bundle/1.0.0","attestationSchema":"d0-attestation/1","generatedAt":"2026-10-12T15:37:23.752Z","scan":{"id":"cc06a3e4-9fb9-4f00-94d8-5e113f02ed56","name":"is-number","version":"7.0.0","artifactSha256":"7b75c1057198cf97696909a9bee176c9c5e9bcb5b03bf3ecef2f484defadd51e","registry":"https://registry.npmjs.org"},"registry":{"version":1,"commitment":"2ddcedcd2fda9ffcea5b63845d9e20814dc6dbb8b753628d4536c450339cf448","entries":[{"publicKeyHex":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","publicKeyDer":"MCowBQYDK2VwAyEApce2HUzbVqea6dv6s4TRzKDEVJ0g2kDHMxOjTfxe3pA=","role":"static_lifecycle","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"},{"publicKeyHex":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","publicKeyDer":"MCowBQYDK2VwAyEAiA+wraoswYh4XpV/7pZs+TmkxXLTcJIcFjUtlVqLd7s=","role":"dependency_advisory","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"},{"publicKeyHex":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","publicKeyDer":"MCowBQYDK2VwAyEA//GJlJ+ayirIZ5o08DMkVqRn2rLfdmz9Mj5awg4usRU=","role":"artifact_integrity","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"}],"storage":"off-chain local registry, anchored by commitment","onChainProgramDeployed":false,"operator":"local-operator (single machine)"},"scanners":[{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"cc06a3e4-9fb9-4f00-94d8-5e113f02ed56","resolvedName":"is-number","resolvedVersion":"7.0.0","artifactSha256":"7b75c1057198cf97696909a9bee176c9c5e9bcb5b03bf3ecef2f484defadd51e","scannerPublicKey":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","scannerRole":"static_lifecycle","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791819443752},"signature":"caee2555d702e33ebbd73ed9222a804f1369507df6db7661c7676cee2e795f165680ec3a5fb2cf4011945c26eff1a00425c0c245b9dda73416495c258111e90b"},{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"cc06a3e4-9fb9-4f00-94d8-5e113f02ed56","resolvedName":"is-number","resolvedVersion":"7.0.0","artifactSha256":"7b75c1057198cf97696909a9bee176c9c5e9bcb5b03bf3ecef2f484defadd51e","scannerPublicKey":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","scannerRole":"dependency_advisory","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791819443752},"signature":"db75ee4efd62f0fbaa5bd36bc838a37ee8767f35455586dbd7b3561484593552b517805eb83f1a1017029a42f20a73531e34e870244b74377ea617b3415e5a0a"},{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"cc06a3e4-9fb9-4f00-94d8-5e113f02ed56","resolvedName":"is-number","resolvedVersion":"7.0.0","artifactSha256":"7b75c1057198cf97696909a9bee176c9c5e9bcb5b03bf3ecef2f484defadd51e","scannerPublicKey":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","scannerRole":"artifact_integrity","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791819443752},"signature":"e775d93a28078e59561396eb6da8023c6fb000a4bc7a5fcf48cb57e27f1a1426218f5dfb188e91cf81d47cb62d608fd801bbbd992ee7a06226ce4aebd58c7002"}],"consensus":{"verified":true,"result":"allow","quorumRequired":3,"quorumMet":3,"policyVersion":"d0-consensus/1.0.0","votes":[{"role":"static_lifecycle","publicKeyHex":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"},{"role":"dependency_advisory","publicKeyHex":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"},{"role":"artifact_integrity","publicKeyHex":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"}],"rejected":[],"unavailableRoles":[],"rationale":"All three scanner roles independently returned ALLOW with valid signatures.","blockOverride":false},"attestation":{"schemaVersion":"d0-attestation/1","mechanism":"spl-memo","mechanismLabel":"Solana Devnet commitment anchored via Memo","cluster":"devnet","commitmentHash":"a81488c12011b70ef49524cf64c58e8f242e95c6ad771459c6c669a11ee39da8","scanId":"cc06a3e4-9fb9-4f00-94d8-5e113f02ed56","artifactSha256":"7b75c1057198cf97696909a9bee176c9c5e9bcb5b03bf3ecef2f484defadd51e","confirmationStatus":"confirmed","blockTime":1791819445,"explorerUrl":"https://explorer.solana.com/tx/4GuMDFYbkfnRxasWc2PMyQn8dQLfA5J2kXfkC9cSrU4NR3JvNFfFSuHuJE35vFjkek7grm2cMipdsNkmGZusr2YP?cluster=devnet","submittedAt":"2026-10-12T15:37:23.862Z","confirmedAt":"2026-10-12T15:37:24.657Z","memoData":"D0/d0-attestation/1 | c=a81488c12011b70ef49524cf64c58e8f242e95c6ad771459c6c669a11ee39da8 | scan=cc06a3e4-9fb9-4f00-94d8-5e113f02ed56 | artifact=7b75c1057198cf97696909a9bee176c9c5e9bcb5b03bf3ecef2f484defadd51e | consensus=allow","memoProgramId":"MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr","idempotencyKey":"fa1496d58029290c6776508d5659fa48","status":"confirmed","transactionSignature":"4GuMDFYbkfnRxasWc2PMyQn8dQLfA5J2kXfkC9cSrU4NR3JvNFfFSuHuJE35vFjkek7grm2cMipdsNkmGZusr2YP","slot":510311201,"confirmed":true,"error":null},"commitment":"a81488c12011b70ef49524cf64c58e8f242e95c6ad771459c6c669a11ee39da8","memoData":"D0/d0-attestation/1 | c=a81488c12011b70ef49524cf64c58e8f242e95c6ad771459c6c669a11ee39da8 | scan=cc06a3e4-9fb9-4f00-94d8-5e113f02ed56 | artifact=7b75c1057198cf97696909a9bee176c9c5e9bcb5b03bf3ecef2f484defadd51e | consensus=allow","expectedMemoProgramId":"MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr","cluster":"devnet","trustModel":{"independentOperators":false,"note":"All scanner keys in this bundle are controlled by a single operator on a single host. Signatures prove internal consistency and tamper-evidence, not independent third-party verification or Byzantine fault tolerance."}}