{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:84abfff2-9260-4330-8375-8fb70d94a531",
  "version": 1,
  "metadata": {
    "timestamp": "2026-02-09T00:00:00Z",
    "tools": [
      {
        "vendor": "Meridian Verity Group",
        "name": "Trust Artifacts Builder",
        "version": "v24.0.0"
      }
    ],
    "component": {
      "type": "application",
      "name": "MVG Proof Playground",
      "version": "v24.0.0"
    }
  },
  "components": [
    {
      "type": "file",
      "name": "/assets/app.js",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "59c76e610d3cabe3251d415d790b4ca60ed7d57bfbdcd995ea628793da8e360c"
        }
      ]
    },
    {
      "type": "file",
      "name": "/assets/styles.css",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b5060a988a1f22ad6bfcfafde59d13bd48d34b5d889ce5d33d833ff10cb29261"
        }
      ]
    },
    {
      "type": "file",
      "name": "/assets/verify/verify-page.js",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "37af4e32da5e3e1d53f7373383e0d8f6220587c88652e462c711eaa9f7b93ea5"
        }
      ]
    },
    {
      "type": "file",
      "name": "/assets/verify/verify-worker.js",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "57dfc00a534cc01f588c005d9db0cc3d41df1d61f057696f579cea8361c3b551"
        }
      ]
    },
    {
      "type": "file",
      "name": "/assets/verify/samplePackB64u.js",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f39eab5494ca7cad9651fb6271f2c1b37569020a795c1b08b3d32e1c09502877"
        }
      ]
    },
    {
      "type": "file",
      "name": "/assets/trust/trust-verify.js",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "89408acbfdc9c4a83c8d3fcb80c2eeb87f160269941c0fe46e3623019bc488f2"
        }
      ]
    },
    {
      "type": "file",
      "name": "/verify/index.html",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "383d8c9178ad42e4d5126addc7edaaa26f71f4480571fb995b3f9360c00f2b98"
        }
      ]
    },
    {
      "type": "file",
      "name": "/trust/index.html",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e50d3e3d3d3e7383cefc5d315557f463a9a56ee49b16327c5c8f4158721094d8"
        }
      ]
    },
    {
      "type": "file",
      "name": "/downloads3/snapshots/2026/02/MVG_Verifier_Trust_Anchor_Registry_Snapshot_v24.json",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7d5e43a1a785d8599e408a149662684020d2b48b3c0dcacf0254ba19bd5fadaf"
        }
      ]
    },
    {
      "type": "file",
      "name": "/downloads3/snapshots/2026/02/MVG_Verifier_Trust_Anchor_Registry_Snapshot_v24.dsse.json",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "6e3bdf841c84f4b53e95f2527005e19c7729369167ecba6f645662a135267ac2"
        }
      ]
    },
    {
      "type": "file",
      "name": "/downloads3/snapshots/2026/02/MVG_Anchored_Signed_Report_Demo_v24.dsse.json",
      "version": "v24.0.0",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cca085ebb6da940e1fabc72b7eaa3e6a90d5fb8d97feab6b048eebdd5c5d62bb"
        }
      ]
    }
  ]
}