{
  "canonical": {
    "site": "https://meridianverity.com/",
    "site_release_root": "https://meridianverity.com/trust/site-release/latest/",
    "trust_descriptor": "https://meridianverity.com/.well-known/mvg-trust.prod.json"
  },
  "critical_assets": [
    {
      "bytes": 8652,
      "path": "/.well-known/mvg-trust.prod.json",
      "sha256": "daaafa7365e9dcf815053a751f17bc9b628374e2716fb8bf0d6d4a64d3c4b3d7",
      "sri": "sha256-2qr6c2Xp3PgVBTp1Hxe8m2KDdOJxb7i/DW1KZNPEs9c="
    },
    {
      "bytes": 1587,
      "path": "/.well-known/mvg-contact.json",
      "sha256": "0301e486154e7847d4ef27f416e18293343468a24aa0f7f1557b9749d04ceb3b",
      "sri": "sha256-AwHkhhVOeEfU7yf0FuGCkzQ0aKJKoPfxVXuXSdBM6zs="
    },
    {
      "bytes": 460,
      "path": "/.well-known/security.txt",
      "sha256": "84f403d36c9c9dbf1710e9ba1202d76783c1b415238106b83f54761f3cb1e7fd",
      "sri": "sha256-hPQD02ycnb8XEOm6EgLXZ4PBtBUjgQa4P1R2Hzyx5/0="
    },
    {
      "bytes": 9500,
      "path": "/_headers",
      "sha256": "770cf8b282219a27d473f40b11f5b445bc221d5c7ef66a8bb673ce832780b155",
      "sri": "sha256-dwz4soIhmifUc/QLEfW0RbwiHVx+9mqLtnPOgyeAsVU="
    },
    {
      "bytes": 8959,
      "path": "/_redirects",
      "sha256": "5d78d3565f5dca183cfbae3f121027ff86e36f269c13a333c6120ccc005a83f6",
      "sri": "sha256-XXjTVl9dyhg8+64/EhAn/4bjbyacE6MzxhIMzABag/Y="
    },
    {
      "bytes": 1608,
      "path": "/assets/site-integrity/sri-bootstrap.v1.js",
      "sha256": "5089bb6b6d368bbe1cf91932049c41c3b9f5f5ffa0678f1d7a7bdb9bf306204e",
      "sri": "sha256-UIm7a202i74c+RkyBJxBw7n19f+gZ48denvbm/MGIE4="
    },
    {
      "bytes": 1638,
      "path": "/assets/site-integrity/hold-remediation-map.v1.json",
      "sha256": "c6e9300602f646e8695ebc83bef6d99094f63c4f7a2ba1608df4547c0bda0b0b",
      "sri": "sha256-xukwBgL2RuhpXryDvvbZkJT2PE96K6FgjfRUfAvaCws="
    },
    {
      "bytes": 115585,
      "path": "/assets/verify/verify-page.js",
      "sha256": "c1b82734bd5f37f7ace4f9977b107007eb46e5a7d7c2a8b7bb2d305ce9725f91",
      "sri": "sha256-wbgnNL1fN/es5PmXexBwB+tG5afXwqi3uy0wXOlyX5E="
    },
    {
      "bytes": 45635,
      "path": "/assets/verify/verify-worker.js",
      "sha256": "aa10962cc2206d882b4ec2273708b48709eab628ed9f04e36121752450dabbe4",
      "sri": "sha256-qhCWLMIgbYgrTsInNwi0hwnqtijtnwTjYSF1JFDau+Q="
    },
    {
      "bytes": 41189,
      "path": "/assets/app.js",
      "sha256": "b4b0d2ed5907cb0779e9065208090b4c7e7569fa905d30a004558e6c0907bf85",
      "sri": "sha256-tLDS7VkHywd56QZSCAkLTH51afqQXTCgBFWObAkHv4U="
    },
    {
      "bytes": 56100,
      "path": "/assets/styles.css",
      "sha256": "c58afebd6f3f1b18b03faf4b840dccf75353ae1567e074b76cff223a1994e399",
      "sri": "sha256-xYr+vW8/GxiwP69LhA3M91NTrhVn4HS3bP8iOhmU45k="
    },
    {
      "bytes": 2123,
      "path": "/trust/site-release/latest/pgp.asc",
      "sha256": "ec454c88cbbecf1e178fa0af488ab728417a2f47c521d242f131b79a3b2d151a",
      "sri": "sha256-7EVMiMu+zx4Xj6CvSIq3KEF6L0fFIdJC8TG3mjstFRo="
    },
    {
      "bytes": 41,
      "path": "/trust/site-release/latest/pgp.fingerprint",
      "sha256": "823fece5171f793269735b73ca9b0fa06c70367e8a5a2a2c2adb93de61c14cae",
      "sri": "sha256-gj/s5RcfeTJpc1tzypsPoGxwNn6KWiosKtuT3mHBTK4="
    }
  ],
  "expires_utc": "2026-03-20T00:00:00Z",
  "integrity": {
    "critical_assets_count": 13,
    "fail_closed": true,
    "notes": [
      "This manifest pins a minimal security-critical set for PROD. UI pages are excluded.",
      "Any critical asset mismatch requires RECUT + re-sign before production publication."
    ]
  },
  "issued_utc": "2026-02-27T06:15:32Z",
  "notes": [
    "PROD PUBLISHED: signatures and key material published (GO-only).",
    "Any critical asset change requires recut + resign (fail-closed discipline)."
  ],
  "schema_id": "mvg.site_release_manifest@1",
  "schema_version": "1.0.0",
  "signing": {
    "kind": "OpenPGP detached signature",
    "note": "Signed and published for PROD verification.",
    "pinned_fingerprint": "DEC99F1CF78053D348005695B5F524661B9C66D0",
    "public_key_url": "https://meridianverity.com/trust/site-release/latest/pgp.asc",
    "signature_layout": "<payload>.sig/<FPR>.asc (multi-sig) + <payload>.asc (primary convenience)",
    "threshold": 1
  },
  "site_release_id": "MVG-SITE-PROD-20260227.3",
  "status": "PUBLISHED",
  "trust_mode": "PROD",
  "version": "v50.10"
}