{ "canonical": "https://meridianverity.com/trust2/policy-evidence/index.json", "expires_utc": "2026-05-19T13:00:00Z", "issued_utc": "2026-02-18T13:00:00Z", "items": [ { "id": "mvg.bucketize_opslog_pointer.dsse", "notes": [ "Signed DSSE pointer for the bucketize opslog head (procurement automation)." ], "signature_glob": "/.well-known/mvg-bucketize-opslog.prod.dsse.json.sig/*", "title": "Bucketize opslog pointer (DSSE)", "url": "/.well-known/mvg-bucketize-opslog.prod.dsse.json" } ], "note": "Machine-readable pointers for procurement automation. This index is discovery metadata; authoritative artifacts are signed and verifiable under the Trust rails.", "policy_pull_official": [ { "id": "eu_ai_act_timeline", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/timeline/timeline-implementation-eu-ai-act" }, { "id": "us_omb_m_24_10", "url": "https://www.whitehouse.gov/wp-content/uploads/2024/03/M-24-10-Advancing-Governance-Innovation-and-Risk-Management-for-Agency-Use-of-Artificial-Intelligence.pdf" }, { "id": "nist_ai_600_1", "url": "https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf" }, { "id": "iso_iec_42001", "url": "https://www.iso.org/standard/42001" } ], "primary_framing": [ { "id": "international_ai_safety_report_2026_publication", "url": "https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026/" }, { "id": "international_ai_safety_report_2026_extended_summary", "url": "https://internationalaisafetyreport.org/extended-summary/" } ], "rails": { "deployments": { "prod": { "bucketize_status_latest": { "pgp_signature": "https://meridianverity.com/trust/deployments/prod/MVG_BUCKETIZE_STATUS_LATEST.json.asc", "url": "https://meridianverity.com/trust/deployments/prod/MVG_BUCKETIZE_STATUS_LATEST.json" } } } }, "schema_id": "mvg.policy_evidence_index@1", "schema_version": "1.0.0", "sequence": 20260218, "ticket_pack_policy": { "bytes_pdf": 3365, "id": "mvg_ticket_pack_policy_public_safe_one_pager", "issued_utc": "2026-02-18T13:00:00Z", "sha256_pdf": "6e800a8948660532a11a7ca76c5cd397c4ba9dbd3cecf638961043171492b16b", "url_html": "https://meridianverity.com/trust2/procurement-ticket-pack/policy/", "url_pdf": "https://meridianverity.com/trust2/procurement-ticket-pack/policy/MVG_Procurement_Ticket_Pack_Policy_PublicSafe_v1.0.0.pdf", "version": "1.0.0" }, "trust_rails": { "DEMO": { "deployments": { "deploy_txn_id": "MVG-DEPLOY-DEMO-20260218.1", "latest_pointer": { "bytes": 515, "path": "trust/deployments/demo/MVG_DEPLOY_TXN_LATEST.json", "pgp_signature": "https://meridianverity.com/trust/deployments/demo/MVG_DEPLOY_TXN_LATEST.json.asc", "sha256": "45417c1bdd68b19d1220ff0bfa9dc7b0115b196dafb497317193016af27936fa", "url": "https://meridianverity.com/trust/deployments/demo/MVG_DEPLOY_TXN_LATEST.json" }, "latest_record": { "path": "/trust/deployments/demo/records/MVG_DEPLOY_TXN_RECORD_MVG-DEPLOY-DEMO-20260218.1_v1.json", "pgp_signature": "https://meridianverity.com/trust/deployments/demo/records/MVG_DEPLOY_TXN_RECORD_MVG-DEPLOY-DEMO-20260218.1_v1.json.asc", "sha256": "48e7e626e9dca798728b45e9eff76350b992a2356ffae164f6b8937978972847", "url": "https://meridianverity.com/trust/deployments/demo/records/MVG_DEPLOY_TXN_RECORD_MVG-DEPLOY-DEMO-20260218.1_v1.json" }, "root": "https://meridianverity.com/trust/deployments/demo/", "status_latest": { "pgp_signature": "https://meridianverity.com/trust/deployments/demo/MVG_DEPLOY_STATUS_LATEST.json.asc", "url": "https://meridianverity.com/trust/deployments/demo/MVG_DEPLOY_STATUS_LATEST.json" } }, "procurement_ticket_pack": { "download_zip": "/downloads/MVG_Procurement_Ticket_Pack_DEMO_ONE_SHOT_GO_v51.4.zip", "expected_verdict": "GO", "index_dsse": "/trust2/procurement-ticket-pack/MVG_PROCUREMENT_TICKET_PACK_INDEX_DEMO_LATEST.dsse.json", "index_json": "/trust2/procurement-ticket-pack/MVG_PROCUREMENT_TICKET_PACK_INDEX_DEMO_LATEST.json" }, "site_release": { "evidence_bundle": { "bytes": 115604, "path": "trust/site-release/demo/releases/MVG_SiteRelease_Evidence_Bundle_MVG-SITE-DEMO-20260218.1.zip", "sha256": "baf100181f319cb01a39b806c03134f02aeb19ed708f6ab10e8721d146867640", "url": "https://meridianverity.com/trust/site-release/demo/releases/MVG_SiteRelease_Evidence_Bundle_MVG-SITE-DEMO-20260218.1.zip" }, "feed": { "bytes": 1630, "path": "trust/site-release/demo/releases/MVG_SITE_RELEASE_FEED.json", "sha256": "58f5a8aa19d9ed1343d0e468e8563bb2ee82c73a13ed78cd3e0b668b5b48abb9", "url": "https://meridianverity.com/trust/site-release/demo/releases/MVG_SITE_RELEASE_FEED.json" }, "release_id": "MVG-SITE-DEMO-20260218.1", "root": "https://meridianverity.com/trust/site-release/demo/", "status_latest": { "pgp_signature": "https://meridianverity.com/trust/site-release/demo/releases/MVG_SITE_RELEASE_STATUS_LATEST.json.asc", "url": "https://meridianverity.com/trust/site-release/demo/releases/MVG_SITE_RELEASE_STATUS_LATEST.json" } }, "trust_descriptor": { "json": "https://meridianverity.com/.well-known/mvg-trust.demo.json", "pgp_signature": "https://meridianverity.com/.well-known/mvg-trust.demo.json.asc" } }, "PROD": { "deployments": { "latest_pointer": { "bytes": 450, "note": "READY_TO_SIGN: signing occurs in operator environment for PROD.", "path": "trust/deployments/prod/MVG_DEPLOY_TXN_LATEST.json", "sha256": "db7cf0435ba712d1a3a7793c6a01cc256b1b7b20e4a4c4b4e4b1464cea60308a", "url": "https://meridianverity.com/trust/deployments/prod/MVG_DEPLOY_TXN_LATEST.json" }, "root": "https://meridianverity.com/trust/deployments/prod/" }, "procurement_ticket_pack": { "download_zip": "/downloads/MVG_Procurement_Ticket_Pack_PROD_LATEST.zip", "expected_verdict": "HOLD_then_GO", "index_dsse": "/trust2/procurement-ticket-pack/MVG_PROCUREMENT_TICKET_PACK_INDEX_PROD_LATEST.dsse.json", "index_json": "/trust2/procurement-ticket-pack/MVG_PROCUREMENT_TICKET_PACK_INDEX_PROD_LATEST.json" }, "site_release": { "evidence_bundle": { "bytes": 102730, "path": "trust/site-release/latest/releases/MVG_SiteRelease_Evidence_Bundle_MVG-SITE-PROD-20260218.1.zip", "sha256": "356418477fd01204afe822c717671afe7638d45f9e8a080881b2e17a14faf364", "url": "https://meridianverity.com/trust/site-release/latest/releases/MVG_SiteRelease_Evidence_Bundle_MVG-SITE-PROD-20260218.1.zip" }, "feed": { "bytes": 1456, "path": "trust/site-release/latest/releases/MVG_SITE_RELEASE_FEED.json", "sha256": "636d875ec6d959c41b8ddb91480c343ff0a704cb158e10f2fb7cffa50bbc7cb7", "url": "https://meridianverity.com/trust/site-release/latest/releases/MVG_SITE_RELEASE_FEED.json" }, "release_id": "MVG-SITE-PROD-20260218.1", "root": "https://meridianverity.com/trust/site-release/latest/", "status_latest": { "note": "READY_TO_SIGN until operator-held production signatures are published.", "url": "https://meridianverity.com/trust/site-release/latest/releases/MVG_SITE_RELEASE_STATUS_LATEST.json" } }, "trust_descriptor": { "json": "https://meridianverity.com/.well-known/mvg-trust.prod.json", "pgp_signature": "https://meridianverity.com/.well-known/mvg-trust.prod.json.asc" } } }, "update_policy": { "max_validity_days": 90, "min_rotation_interval_hours": 24, "required_signing_role": "deploy_transaction", "rollback_protection": "monotonic_sequence", "rotate_before_days": 14 }, "updated_at_utc": "2026-02-19T02:37:21Z", "verification": { "deployments_one_shot_demo": "python3 public_verify_deploy_txn_v51.py --site-root . --trust-mode demo", "deployments_prod": "python3 public_verify_deploy_txn_v51.py --site-root . --trust-mode prod", "site_release_one_shot_demo": "python3 public_verify_site_release_v50_4.py --site-root . --trust-mode demo", "site_release_prod": "python3 public_verify_site_release_v50_4.py --site-root . --trust-mode prod" } }