{"bundleSchema":"d0-proof-bundle/1.0.0","attestationSchema":"d0-attestation/1","generatedAt":"2026-10-12T16:04:13.090Z","scan":{"id":"f8d3ce79-27fe-4b5f-bcdc-400239854b17","name":"nanoid","version":"6.0.2","artifactSha256":"91f1fbef0fc30de371dbf9dfe668942b317503477d267920c5a9ea9b994be569","registry":"https://registry.npmjs.org"},"registry":{"version":1,"commitment":"2ddcedcd2fda9ffcea5b63845d9e20814dc6dbb8b753628d4536c450339cf448","entries":[{"publicKeyHex":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","publicKeyDer":"MCowBQYDK2VwAyEApce2HUzbVqea6dv6s4TRzKDEVJ0g2kDHMxOjTfxe3pA=","role":"static_lifecycle","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"},{"publicKeyHex":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","publicKeyDer":"MCowBQYDK2VwAyEAiA+wraoswYh4XpV/7pZs+TmkxXLTcJIcFjUtlVqLd7s=","role":"dependency_advisory","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"},{"publicKeyHex":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","publicKeyDer":"MCowBQYDK2VwAyEA//GJlJ+ayirIZ5o08DMkVqRn2rLfdmz9Mj5awg4usRU=","role":"artifact_integrity","registeredAt":"2026-10-12T15:37:23.761Z","registryVersion":1,"revoked":false,"operator":"local-operator (single machine)"}],"storage":"off-chain local registry, anchored by commitment","onChainProgramDeployed":false,"operator":"local-operator (single machine)"},"scanners":[{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"f8d3ce79-27fe-4b5f-bcdc-400239854b17","resolvedName":"nanoid","resolvedVersion":"6.0.2","artifactSha256":"91f1fbef0fc30de371dbf9dfe668942b317503477d267920c5a9ea9b994be569","scannerPublicKey":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","scannerRole":"static_lifecycle","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791821053090},"signature":"ac00c7af9629f0215c51663f3882a32c5c35d12a7f508648bb8be9ff531e730dde9f09e3b5a00a4a31565be3a6b28a50bba8799c55688ad37b7c87a30cf5d907"},{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"f8d3ce79-27fe-4b5f-bcdc-400239854b17","resolvedName":"nanoid","resolvedVersion":"6.0.2","artifactSha256":"91f1fbef0fc30de371dbf9dfe668942b317503477d267920c5a9ea9b994be569","scannerPublicKey":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","scannerRole":"dependency_advisory","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791821053090},"signature":"8ded99f460fc8909b86088423b26550da05e2d753748d7cadb1c024c4099791b686d042b8b892eabc4934f616a38f976476c52040de6cc81e15177e3822a660a"},{"payload":{"schemaVersion":"d0-attestation/1","domain":"DEPENDENCY-ZERO/ATTESTATION","scanId":"f8d3ce79-27fe-4b5f-bcdc-400239854b17","resolvedName":"nanoid","resolvedVersion":"6.0.2","artifactSha256":"91f1fbef0fc30de371dbf9dfe668942b317503477d267920c5a9ea9b994be569","scannerPublicKey":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","scannerRole":"artifact_integrity","scannerVersion":"d0-scanner/2.0.0","policyVersion":"d0-policy/1.0.0","findingsCommitment":"e9912a3fd85902a8f66bd2aefb404eb0e01cdcfdebbea64c69feb47fb5f39ad8","findingCount":0,"proposedVerdict":"allow","riskScore":0,"completionStatus":"completed","timestamp":1791821053090},"signature":"b76744edc14586c3908769634a7000c3010ea6a2459dae9cd60b24c54ba2455acc548ce28efd5958f6ea833140a0814641cd4c8636a30e6bf5022dd576e46e07"}],"consensus":{"verified":true,"result":"allow","quorumRequired":3,"quorumMet":3,"policyVersion":"d0-consensus/1.0.0","votes":[{"role":"static_lifecycle","publicKeyHex":"a5c7b61d4cdb56a79ae9dbfab384d1cca0c4549d20da40c73313a34dfc5ede90","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"},{"role":"dependency_advisory","publicKeyHex":"880fb0adaa2cc188785e957fee966cf939a4c572d370921c16352d955a8b77bb","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"},{"role":"artifact_integrity","publicKeyHex":"fff189949f9aca2ac8679a34f0332456a467dab2df766cfd323e5ac20e2eb115","verdict":"allow","riskScore":0,"rationale":"","operator":"local-operator (single machine)"}],"rejected":[],"unavailableRoles":[],"rationale":"All three scanner roles independently returned ALLOW with valid signatures.","blockOverride":false},"attestation":{"schemaVersion":"d0-attestation/1","mechanism":"spl-memo","mechanismLabel":"Solana Devnet commitment anchored via Memo","cluster":"devnet","commitmentHash":"f6ef9547619d22f12b6f1b0b3ac861162d73893a985db012e8132a8513078c30","scanId":"f8d3ce79-27fe-4b5f-bcdc-400239854b17","artifactSha256":"91f1fbef0fc30de371dbf9dfe668942b317503477d267920c5a9ea9b994be569","confirmationStatus":"confirmed","blockTime":1791821054,"explorerUrl":"https://explorer.solana.com/tx/3GiP94nJhr1jepufJ6oLfqJarZ3DgAh4xU9BtwzGtvgKX7fuuCqUFqGSgpAvY8dcp9LnH2vpTYrzgojVGdEJeYhb?cluster=devnet","submittedAt":"2026-10-12T16:04:13.100Z","confirmedAt":"2026-10-12T16:04:14.097Z","memoData":"D0/d0-attestation/1 | c=f6ef9547619d22f12b6f1b0b3ac861162d73893a985db012e8132a8513078c30 | scan=f8d3ce79-27fe-4b5f-bcdc-400239854b17 | artifact=91f1fbef0fc30de371dbf9dfe668942b317503477d267920c5a9ea9b994be569 | consensus=allow","memoProgramId":"MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr","idempotencyKey":"a0d1b49cec5c49c44a68d20148689baa","status":"confirmed","transactionSignature":"3GiP94nJhr1jepufJ6oLfqJarZ3DgAh4xU9BtwzGtvgKX7fuuCqUFqGSgpAvY8dcp9LnH2vpTYrzgojVGdEJeYhb","slot":510317940,"confirmed":true,"error":null},"commitment":"f6ef9547619d22f12b6f1b0b3ac861162d73893a985db012e8132a8513078c30","memoData":"D0/d0-attestation/1 | c=f6ef9547619d22f12b6f1b0b3ac861162d73893a985db012e8132a8513078c30 | scan=f8d3ce79-27fe-4b5f-bcdc-400239854b17 | artifact=91f1fbef0fc30de371dbf9dfe668942b317503477d267920c5a9ea9b994be569 | consensus=allow","expectedMemoProgramId":"MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr","cluster":"devnet","trustModel":{"independentOperators":false,"note":"All scanner keys in this bundle are controlled by a single operator on a single host. Signatures prove internal consistency and tamper-evidence, not independent third-party verification or Byzantine fault tolerance."}}