{
  "schema_version": "fasttool-evidence-receipt/v1",
  "tool_slug": "sarif-finding-delta-release-gate",
  "tool_version": "0.1.0",
  "canonical_url": "https://fasttool.app/tools/sarif-finding-delta-release-gate/",
  "created_at": "2026-07-13T05:18:15.949Z",
  "input_source": "generated_fixture",
  "input_hashes": {
    "cli_sha256": "31915a17a77fd1331d2b45394e09904f5b9203d9cda22e8602f8636454ea2ac1",
    "action_sha256": "f31a0d700c52fbae5fbc62b75e72bffba657fc7eb1733f6ab37e0ac7f18d23e2"
  },
  "artifact_hashes": {
    "fasttool-evidence-cli-v0.1.0.tgz": "ecfbd29fefe2854b8fb60d499bd2901a19ba54efe411cb5fbcf3b64c04c2d027",
    "fasttool-evidence-action-v0.1.0.zip": "c37242eb22eb46f78c7b030e32bf6021978b800f82ce870e602e8ebf54a13877",
    "README.md": "f72a367f87611933b57214272b6389d51194198e78673d1f16bf02a6e4b98926",
    "fasttool-evidence-v0.1.0-release-manifest.json": "baa6d128433ded02fcac01c7aa571f78f75c658ce2768bae21b0756b7806ac1d"
  },
  "artifacts": [
    {
      "name": "fasttool-evidence-cli-v0.1.0.tgz",
      "media_type": "application/gzip",
      "byte_length": 111862,
      "sha256": "ecfbd29fefe2854b8fb60d499bd2901a19ba54efe411cb5fbcf3b64c04c2d027"
    },
    {
      "name": "fasttool-evidence-action-v0.1.0.zip",
      "media_type": "application/zip",
      "byte_length": 119873,
      "sha256": "c37242eb22eb46f78c7b030e32bf6021978b800f82ce870e602e8ebf54a13877"
    },
    {
      "name": "README.md",
      "media_type": "text/markdown",
      "byte_length": 1553,
      "sha256": "f72a367f87611933b57214272b6389d51194198e78673d1f16bf02a6e4b98926"
    },
    {
      "name": "fasttool-evidence-v0.1.0-release-manifest.json",
      "media_type": "application/json",
      "byte_length": 1856,
      "sha256": "baa6d128433ded02fcac01c7aa571f78f75c658ce2768bae21b0756b7806ac1d"
    }
  ],
  "source_refs": [
    "https://fasttool.app/tools/sarif-finding-delta-release-gate/",
    "https://fasttool.app/tools/receipt-verifier/",
    "https://docs.npmjs.com/cli/v11/commands/npm-pack",
    "https://docs.github.com/en/actions/sharing-automations/creating-actions/metadata-syntax-for-github-actions"
  ],
  "assumptions": [
    "The consuming runtime provides Node.js 20 or newer."
  ],
  "warnings": [
    "FastTool direct-download is the canonical release channel; external registries are not published by this release."
  ],
  "limits": [
    "SHA-256 integrity does not establish security, authorship, deployment, ownership or legal admissibility.",
    "The Action archive must be reviewed and committed locally or pinned to an immutable full commit SHA if it is hosted later."
  ],
  "fixture_id": "fasttool-evidence-distribution-v0.1.0",
  "verification_url": "https://fasttool.app/tools/receipt-verifier/",
  "parent_receipt_hashes": [],
  "engine_sha256": "b8692f62d6588b2b8c0ad68d85f3efea567b998029686656652ee56774692c86",
  "verification": {
    "status": "producer_self_check",
    "independent_review_claimed": false
  },
  "result_summary": {
    "publication_state": "direct_site_release",
    "direct_site": "canonical_release_channel",
    "release_version": "0.1.0",
    "artifact_count": 4,
    "npm_published": false,
    "github_published": false,
    "github_marketplace_published": false
  },
  "receipt_core_sha256": "f4c313d2dd6ea534960f59e6d3503b3cbd8f4c16458e6b2f18642eb4aa860244"
}