{"_type":"https://in-toto.io/Statement/v1","predicate":{"builder":"photonfile-verifier-release","construction_order":["native","browser","source","vectors","setup","evidence","sbom","provenance","manifest","checksums","channel"],"dependencies":[{"binary_identity":"e93a5316001c8cfc546ef8177c6caca73be3bfb75b56d6069907a862ea34783e","kind":"linked-library","name":"libQt6Core.a","notice_sha256":"fab86c5bea527eb9cefafdbf917bd1af53fd49bd0c44518fa70d350e097f8a6e","package":"qtbase","recipe":"git+https://github.com/Microsoft/vcpkg@1ab7c7c7654ecd1fa22b8c05c9cfc3c3e91aadc8","sha256":"0a7aaf4e0352acff42e8652fcdd680bbaf8f5506ec2c7f2b1c55726b974dfa19","version":"6.10.0#1"},{"binary_identity":"57e865872fd75538a8049e89d92a26e8739def85ad13ab9173c8f7cd2c0c9b63","kind":"linked-library","name":"libb2.a","notice_sha256":"6a1ee543e5282cd9061881edf462e6fdab181f328da71fc2c9a6950a80e94d01","package":"libb2","recipe":"git+https://github.com/Microsoft/vcpkg@4bf555d778e96bde29715be0519297dd805b9d2b","sha256":"cdcd5d865976f084d4b5632e0fb19d46629f26b3a8540ed6591cf4febd0f6da3","version":"0.98.1#7"},{"binary_identity":"c3ef7a0519f2a70c66e3b8b075569895da4dd4245f9c0b52ce831442656807f1","kind":"linked-library","name":"libcrypto.a","notice_sha256":"7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a","package":"openssl","recipe":"git+https://github.com/Microsoft/vcpkg@13ecbd590e54cff1467a8196b5f0dcab74ae1c24","sha256":"954dd62c236ed3ee609eaccf54ce4bd32643d68860223f79dd775bf69c3e7c84","version":"3.6.1#2"},{"binary_identity":"f2acc1d3401cee7664fe719546865760d2dbb9d49d2f175fd830b138644af0f9","kind":"linked-library","name":"libdouble-conversion.a","notice_sha256":"4af93c12062c58058378de2397dc1c92bbff9ddfb1d583a01c84127557ce97ca","package":"double-conversion","recipe":"git+https://github.com/Microsoft/vcpkg@dde04ced6dca235e927274ecff2261da0d5ec8a9","sha256":"898fb50dc6630fe0b6b1ac7672fb402543ad8a42fec56dea7fccc013ee31e4d9","version":"3.4.0"},{"binary_identity":"e7ca97ee7b6126e8b9cf4cc44181ef4f3a5242dc2428f4be9b3898b09e50d45e","kind":"linked-library","name":"libicudata.a","notice_sha256":"e55522d81edc687a341a4411e0776e54ca654e90147f354a90458aaced4116af","package":"icu","recipe":"NOASSERTION","sha256":"2ace9effdf02b664b0c5ccc0d42086838e0ed5b8cacba389408cc972f4daa5f3","version":"78.2"},{"binary_identity":"e7ca97ee7b6126e8b9cf4cc44181ef4f3a5242dc2428f4be9b3898b09e50d45e","kind":"linked-library","name":"libicui18n.a","notice_sha256":"e55522d81edc687a341a4411e0776e54ca654e90147f354a90458aaced4116af","package":"icu","recipe":"NOASSERTION","sha256":"db3d3d0dc2c1d74d36c2c6e84ea6c45d203bbad5216f02dbde3901a5bee7b331","version":"78.2"},{"binary_identity":"e7ca97ee7b6126e8b9cf4cc44181ef4f3a5242dc2428f4be9b3898b09e50d45e","kind":"linked-library","name":"libicuuc.a","notice_sha256":"e55522d81edc687a341a4411e0776e54ca654e90147f354a90458aaced4116af","package":"icu","recipe":"NOASSERTION","sha256":"19ee8cccbc2c52dc4af36cfb795f464b546d87934bab5909cf559685d9942ff8","version":"78.2"},{"binary_identity":"832a9fec3237a8889bfca40ab3707a8b163e894d10eb6cf46ed6760e6037210e","kind":"linked-library","name":"libpcre2-16.a","notice_sha256":"99272c55f3dcfa07a8a7e15a5c1a33096e4727de74241d65fa049fccfdd59507","package":"pcre2","recipe":"git+https://github.com/Microsoft/vcpkg@753cc6dbffbcde00b0c10b8d594108beb320a183","sha256":"ee5eb1c0f22d9896e12c73033f2b369a2570a4df45bea58c2551e0f76ad7cc78","version":"10.47"},{"binary_identity":"97829df2abbc92e8f96b233208672afa0fee0404e167b1511b12e320439a8083","kind":"linked-library","name":"libz.a","notice_sha256":"845efc77857d485d91fb3e0b884aaa929368c717ae8186b66fe1ed2495753243","package":"zlib","recipe":"git+https://github.com/Microsoft/vcpkg@3f05e04b9aededb96786a911a16193cdb711f0c9","sha256":"deb83b6069e748e40604a80358abd0ca577fc35eb52af3e0ce08d372255a3d8d","version":"1.3.1"},{"binary_identity":"e4bb87872b6ffae4e502179691e33ec3fdfd607f95c80d680323ff8025f9c6cf","kind":"linked-library","name":"libzstd.a","notice_sha256":"ae73833b0ceb843626baec97a749ebc5c4df2bd4c09c3866a62ef263ce666a22","package":"zstd","recipe":"git+https://github.com/Microsoft/vcpkg@31b7320fab13790c6861cb3c2d50dc8f60ca3602","sha256":"220f6b5d413c089c6b740b1ed483f905fd528d6a9f06a27bddeaf8f6b82607e1","version":"1.5.7"},{"binary_identity":"fd885d5a52c98529d1f23ba9ef71608a3ccc488c0254d6ae7d61219cb865094f","kind":"linked-library","name":"libsodium.so.26.3.0","notice_sha256":"508a76d186356c0dd807a670ef510964f8724557024796a2c426c6c0e19ab683","package":"libsodium","recipe":"git+https://github.com/Microsoft/vcpkg@479afaa8be9c989f9779219ee421022664623221","sha256":"a1e2cccd2eaceea290dbf8ff67cfeafb8e7312322014faada74de62ab8d4ad09","version":"1.0.21"},{"kind":"system-link-input","name":"librt.a","sha256":"f0a17a43c74d2fe5474fa2fd29c8f14799e777d7d75a2cc4d11c20a6e7b161c5"},{"license":"ISC","name":"libsodium.js-sumo","recipe":"https://raw.githubusercontent.com/jedisct1/libsodium.js/7230467d2f953e371d3edabf3a0b6cae6465c098/dist/browsers-sumo/sodium.js","role":"browser","sha256":"9364f3c2f436752274efd92e62e1e7a128327e3fa283c71c306e5ad43d76cc18","version":"0.8.3"},{"license":"ISC","name":"libsodium","recipe":"https://github.com/jedisct1/libsodium/tree/77e1ce5d6dee871c49ef211222ba18ef0c486bda","role":"browser","version":"1.0.22"},{"license":"MIT","name":"mlkem-wasm","recipe":"https://registry.npmjs.org/mlkem-wasm/-/mlkem-wasm-0.0.7.tgz","role":"browser","sha256":"c448281a35ab66fce6e0c77d716e22fcb10e29c944dbf187be9dd263f032066d","version":"0.0.7"},{"license":"MIT","name":"mlkem-native","recipe":"https://github.com/pq-code-package/mlkem-native/tree/91f19272797e9960ff1e3e41292ea0ac765a6dbe","role":"browser","version":"git-91f19272797e9960ff1e3e41292ea0ac765a6dbe"}],"generation":1,"reproducibility":"Payload recipes are recorded separately; platform signatures and execution evidence are not claimed bit-for-bit reproducible","source":{"source_commit":"063600d3409bc8b4375abf0a9bdef03e56541124","source_tree_dirty":false,"source_tree_sha256":"3c11cbe5d030b49f2faa0ad42cd6e842944de5e55130e52aa4f750e8ed17aebb"},"version":"0.1.5"},"predicateType":"https://www.photonfile.com/verification/provenance/v1","subject":[{"digest":{"sha256":"a63151f434bde8fb182f496bd4b7235ddc68491d0e4026654888e9e60c41d066"},"name":"photonfile-verifier-0.1.5-linux-x86_64-glibc2.34.tar.gz"},{"digest":{"sha256":"a4d1f4142061e47af84b6dbb1f00a5b17b9d0e6234b93c7327d8bd8e87b42233"},"name":"photonfile-verifier-0.1.5-browser.tar.gz"},{"digest":{"sha256":"c83d920fe670d8266b442198091ae5db5b16a331eb0975789d46e30b8fa8a132"},"name":"photonfile-verifier-0.1.5-source.tar.gz"},{"digest":{"sha256":"84b3d4760f0832271d85bf80530212b2294ba71889b7247e0948369e639bc65e"},"name":"photonfile-verifier-0.1.5-vectors.tar.gz"},{"digest":{"sha256":"5b81ab25a1f48800452a5fbd0a6db68e8dca09b05def5d6ee7f18e400dab0460"},"name":"photonfile-verifier-setup.py"},{"digest":{"sha256":"902e8e731e3d0701c59b904ed7d9e6f76a667c9f05c03c8670def46751144162"},"name":"photonfile-verifier-0.1.5-g1-evidence.tar.gz"},{"digest":{"sha256":"b38ea703af0b69fc919b5c7fbae7e45ff2c00d3ac449ca3f3fd11ab268198200"},"name":"photonfile-verifier-0.1.5-g1.spdx.json"}]}