{
  "checks": [
    {
      "details": null,
      "id": "no_ops_local_in_public_dist",
      "result": "PASS"
    },
    {
      "details": null,
      "id": "no_pyc_in_public_dist",
      "result": "PASS"
    },
    {
      "details": "No private key material detected.",
      "id": "no_private_key_material_in_public_artifacts",
      "result": "PASS"
    },
    {
      "details": "SSoT=/.well-known; /well-known is byte-identical mirror + 301 redirect.",
      "id": "well_known_canonicalization",
      "result": "PASS"
    },
    {
      "details": "13/13 critical assets match sha256+bytes+sri (fail-closed).",
      "id": "critical_assets_match",
      "result": "PASS"
    },
    {
      "details": "Deployments rail published under trust/deployments/prod/ and signed under deploy_transaction role.",
      "id": "deployments_rail_ready",
      "result": "PASS"
    }
  ],
  "issued_utc": "2026-02-18T00:00:00Z",
  "notes": [
    "READY_TO_SIGN channel: production signature material intentionally not published.",
    "If it's missing, it's HOLD. PROD remains GO-only."
  ],
  "overall": "HOLD",
  "schema_id": "mvg.site_release_test_attestation@1",
  "schema_version": "1.0.0",
  "site_release_id": "MVG-SITE-PROD-20260218.1",
  "trust_mode": "PROD"
}