{
  "schema": "mvg.production_go_pointer@1",
  "issued_utc": "2026-02-23T00:00:00Z",
  "canonical_surface": "https://meridianverity.com/trust/site-release/",
  "public_safe": true,

  "purpose": "Single authoritative, signed pointer for MVG production website GO state. Unsigned or unverifiable pointers must be treated as HOLD (fail-closed).",

  "production": {
    "rail": "prod",
    "status": "READY_TO_SIGN",
    "note": "This pointer becomes authoritative once the detached signature publishes."
  },

  "pointers": {
    "trust_center": "https://meridianverity.com/trust-center/",
    "site_release_hub": "https://meridianverity.com/trust/site-release/",
    "site_release_latest": "https://meridianverity.com/trust/site-release/latest/",
    "ticket_pack_dsse": "https://meridianverity.com/.well-known/mvg-procurement-ticket-pack.dsse.json",
    "transparency_proofs_latest": "https://meridianverity.com/transparency/procurement-ticket-pack/prod/proofs/LATEST.json"
  },

  "verification": {
    "expected_outputs": {
      "PASS": "Production GO pointer signature verifies against the pinned MVG key fingerprint and referenced artifacts verify offline.",
      "HOLD": "Signature missing / withheld / cannot be established.",
      "FAIL": "Signature present but invalid / does not match the pinned fingerprint."
    },
    "verify_hint": "gpg --verify /.well-known/mvg-prod.json.asc /.well-known/mvg-prod.json"
  },

  "signing": {
    "detached_signature": "/.well-known/mvg-prod.json.asc",
    "pinned_key_fingerprint_source": "/.well-known/security.txt",
    "policy": "Missing signature MUST result in HOLD (fail-closed)."
  },

  "boundary": {
    "not_a_certification": true,
    "non_binding_unless_incorporated": true,
    "public_safe": true
  }
}