Trust rail

Signed status aggregator

A CI-produced, audit-friendly summary. UI is display-only; authoritative proofs are the signed artifacts under the Trust rails.

Automation input

One URL a procurement pipeline can ingest:

https://status.meridianverity.com/.well-known/mvg-status.dsse.json

Related: mvg-procurement-inputs.json

PROD

MVG_STATUS_AGGREGATE_PROD_LATEST.json

Detached signature (operator-held for production)

Witness: optional details

Missing, stale, inconsistent, or unverifiable artifacts MUST yield HOLD (fail-closed).