{
  "schema_id": "mvg.transparency.inclusion_proof@1",
  "schema_version": 1,
  "issued_utc": "2026-03-03T08:56:20Z",
  "root_dsse_url": "/transparency/procurement-ticket-pack/prod/root.dsse.json",
  "log_url": "/transparency/procurement-ticket-pack/prod/log.ndjson",
  "log_sha256": "a415e77285cab0a9980a603069ddba02c320d861fa595e7aac0022fe0c7994ce",
  "root_sha256": "ff94834a4c151e9c08c53d17150c907d41e88658b247770dc929195ace9cf582",
  "tree_size": 17,
  "leaf_index": 16,
  "leaf_sha256": "401dbe7d5ab14fd1d7ac053419cd86f9007bf8f8a69308b4d49575316669ac4b",
  "audit_path": [
    "401dbe7d5ab14fd1d7ac053419cd86f9007bf8f8a69308b4d49575316669ac4b",
    "0a23de031969fbb6f6716e7b457585ad0e5cb75cdcd388972e44d75c03cdc425",
    "7fb0d7699e7cc66119accd2b9afae3f539dd2b6620a56c8baf8c6b83120c0489",
    "5833f3d239f6e2dba11c63fe5734c5d4e7578f1a8d53b4f51b308653c72314f3",
    "131f3792874d1728f8cff17650e72c8b138e699594e525e1a752e40ecff20191"
  ],
  "entry": {
    "schema_id": "mvg.transparency.procurement_ticket_pack_chain_entry@2",
    "schema_version": 2,
    "trust_mode": "PROD",
    "issued_utc": "2026-02-27T15:59:35Z",
    "pointer_url": "/.well-known/mvg-procurement-ticket-pack.prod.dsse.json",
    "subject": {
      "name": "trust/procurement-ticket-pack/MVG_PROCUREMENT_TICKET_PACK_INDEX_PROD_LATEST.json",
      "sha256": "3f386e76a1c86ade2a5b77ed8ca0da6422ee0ad8321913c894ed0d6f945976d7",
      "bytes": 2662
    },
    "artifacts": {
      "ticket_pack_zip": {
        "path": "/downloads/MVG_Procurement_Ticket_Pack_PROD_LATEST.zip",
        "sha256": "66325d457ff4a6aced068bca1e3f7ce7a9b144a4e7a0ea60346a1a788e17acd5",
        "bytes": 136848
      },
      "embedded_site_release_verifier_zip": {
        "path_in_ticket_pack": "MVG_Procurement_Ticket_Pack_PROD_PUBLISHED_v70.1/verifiers/MVG_Public_SiteRelease_Verifier_v50.4.zip",
        "sha256": "b09aefb479041e862ccdf0272b2919e9d48c92b6e16cb8eb90ad8a1ce30841be",
        "bytes": 6894
      },
      "embedded_site_release_evidence_bundle_zip": {
        "path_in_ticket_pack": "MVG_Procurement_Ticket_Pack_PROD_PUBLISHED_v70.1/evidence_bundle/MVG_SiteRelease_Evidence_Bundle_MVG-SITE-PROD-20260218.1.zip",
        "sha256": "cc5dd959f108299a03357cc51707fc8d01cd3af6efbd2441d1924cbd536070c7",
        "bytes": 122400
      },
      "security_review_packet_pdf": {
        "path": "/trust/security-review/packet.pdf",
        "sha256": "2f692c53e8499e38ac177cd5d35e0879663924f9cddea23526f43bec1422ce16",
        "bytes": 23205,
        "scope": "PUBLIC_REDACTED"
      },
      "company_descriptor_json": {
        "path": "/.well-known/mvg-company.json",
        "sha256": "33a29cbc4c30c866f305ed8d17f1f1c5b90d9fa000c4f98ccde96312e5f8ae09",
        "bytes": 2100,
        "scope": "PUBLIC"
      },
      "company_descriptor_json_asc": {
        "path": "/.well-known/mvg-company.json.asc",
        "sha256": "813fd5a30f4c15a26095719dcd094083b17c2a3301348c7d85c40fa6e472a3b8",
        "bytes": 228,
        "scope": "PUBLIC"
      },
      "governance_descriptor_json": {
        "path": "/.well-known/mvg-governance.json",
        "sha256": "73a5c8c7a291cca7eb1279f2dc8e0e402f021db4784345433332a73b46c9d9d8",
        "bytes": 3315,
        "scope": "PUBLIC"
      },
      "governance_descriptor_json_asc": {
        "path": "/.well-known/mvg-governance.json.asc",
        "sha256": "4228098fac2e505d26c10f7385c966b6e96db1fe51363dfaabf56988e78026bb",
        "bytes": 228,
        "scope": "PUBLIC"
      },
      "aims_descriptor_json": {
        "path": "/.well-known/mvg-aims.json",
        "sha256": "864ff071239a1895b6679094bb16ec81103247e4ffb017d963df6d4c6f792e06",
        "bytes": 3626,
        "scope": "PUBLIC"
      },
      "aims_descriptor_json_asc": {
        "path": "/.well-known/mvg-aims.json.asc",
        "sha256": "f585668d13bf7f296c08eeea49ccdb83ac3c216b5ce077f4bd2bb2144b969595",
        "bytes": 228,
        "scope": "PUBLIC"
      },
      "safety_ir_descriptor_json": {
        "path": "/.well-known/mvg-safety-ir.json",
        "sha256": "c2782c72f186806d2b9037fe0986ea062c20b2b47d58185b68b14f7bbe3299cf",
        "bytes": 4517,
        "scope": "PUBLIC"
      },
      "safety_ir_descriptor_json_asc": {
        "path": "/.well-known/mvg-safety-ir.json.asc",
        "sha256": "4646b3da59eaf57350a5796facc13f412e21c8d59b5522f492b613210d43fb1e",
        "bytes": 228,
        "scope": "PUBLIC"
      },
      "privacy_policy_pdf": {
        "path": "/legal/privacy/MVG_Privacy_Policy_v1.0.4.pdf",
        "sha256": "c295122df19d087e6530c85c43e4825f22d365ea0b704bcdc3030f9c5ab1d038",
        "bytes": 16204,
        "scope": "PUBLIC"
      },
      "controls_mapping_pdf": {
        "path": "/downloads/controls-mapping/controls_mapping_v1.pdf",
        "sha256": "902f1fd4bd8deeb880cd03cfa0819b40cea12bcdbe9956cf0bc42919e99767cb",
        "bytes": 78219,
        "scope": "PUBLIC"
      },
      "controls_mapping_csv": {
        "path": "/downloads/controls-mapping/controls_mapping_v1.csv",
        "sha256": "2250c1fbb5cc7b5ba04f965ba18d839c36c6580de29f201a771f8509f7ed199f",
        "bytes": 6215,
        "scope": "PUBLIC"
      },
      "controls_mapping_sha256sums": {
        "path": "/downloads/controls-mapping/SHA256SUMS.controls_mapping",
        "sha256": "c7201bcb16386a9e8d0e7c81654420d6ed150a2c3848bbd44ca289d1bb1e2ee1",
        "bytes": 366,
        "scope": "PUBLIC"
      },
      "genai_controls_map_pdf": {
        "path": "/downloads/controls-mapping/owasp_genai_mvg_map_v1.pdf",
        "sha256": "c4f3c8c90ae4910b031826d00fa012551f2aa027a82219649f0d12601fa9677b",
        "bytes": 532100,
        "scope": "PUBLIC"
      },
      "genai_controls_map_csv": {
        "path": "/downloads/controls-mapping/owasp_genai_mvg_map_v1.csv",
        "sha256": "8cdb5acdc8cc3c546df985bf3e6792f3605b7413a638337ce360b8f78358cf09",
        "bytes": 3582,
        "scope": "PUBLIC"
      },
      "genai_controls_map_sha256": {
        "path": "/downloads/controls-mapping/owasp_genai_mvg_map_v1.sha256",
        "sha256": "c185a76fa2618dfbe484a91f869e57f362492899ae4cd70d7692590b264c1c35",
        "bytes": 186,
        "scope": "PUBLIC"
      },
      "advisories_ndjson": {
        "path": "/security/advisories/advisories.ndjson",
        "sha256": "aa56b4327e03a1258392d1628cf1ef49fd34a6a83a8dcd71637ec7669d5d5349",
        "bytes": 391,
        "entries": 1,
        "latest_adv_id": "MVG-ADV-2026-0000",
        "scope": "PUBLIC"
      },
      "advisories_root_dsse": {
        "path": "/security/advisories/advisories.root.dsse.json",
        "sha256": "0be880332883aae6018f5f0bb1ff9edf52581de906a34788f28efa4267aa177f",
        "bytes": 1193,
        "scope": "PUBLIC"
      },
      "advisories_sha256sums": {
        "path": "/security/advisories/SHA256SUMS.advisories",
        "sha256": "80cbe9ae88c277817cca11a554688e798618d8852e0b73ae4b6891ee685de629",
        "bytes": 374,
        "scope": "PUBLIC"
      },
      "advisories_sha256sums_asc": {
        "path": "/security/advisories/SHA256SUMS.advisories.asc",
        "sha256": "08f5436137b22587ff960d22c219e697c0426162dc3653a416b89d7b26020f69",
        "bytes": 228,
        "scope": "PUBLIC"
      }
    },
    "sequence": 4,
    "receipts_delta": {
      "company": "unchanged",
      "governance": "unchanged",
      "aims": "unchanged",
      "safety_ir": "unchanged"
    },
    "receipts_changed": [],
    "advisories_delta": {
      "feed": "unchanged",
      "root": "unchanged",
      "manifest": "unchanged",
      "manifest_sig": "unchanged"
    },
    "advisories_changed": []
  }
}