[doc] receipts · sha:be27b283ee45 · build:2026-09-27T05:15:32.693Z
Receipts.
Registry-backed public package claims below resolve to build-time artifacts. Public non-registry and research claims are labeled by attestation state. Product versions and commit SHAs below are fetched at build time from public registries with the persistent fetch cache disabled. If a secondary source is unavailable, the affected field is labeled unavailable instead of using a stale fallback.
[site] centennialsystems.com
Site attestation.
- domain
- centennialsystems.com
- build-sha
- be27b283ee45
- build-time
- 2026-09-27T05:15:32.693Z
- next-version
- 16.3.3
- node-runtime-contract
- >=20.20.1 <25
- prebuilt-build-node-version
- v22.22.3
- vercel-node-function-runtime
- nodejs24.x
- vercel-python-function-runtime
- python3.12
- ssl-issuer
- Let's Encrypt (Vercel-managed)
[build] source attestation
- build-sha-full
- be27b283ee45856466b1e36a49723b8c9836eaa1
- manifest
- https://centennialsystems.com/manifest.json
- security-txt
- https://centennialsystems.com/.well-known/security.txt
[states] non-registry surfaces
- Governed Agent Kernel · research
- Standard: https://github.com/cjchanh/gak-conformance-standard · observed source SHA 80f491123a532b4055e58ca3de26054ecbbeaaf2. The public v1 Deponent badge is reproducible. Published v1.1 author-built certifications have zero third-party verdicts, fail current clean consistency checks, and lack exact code/source binding; published / not independently reproducible.
- Archivist · external-only
- External product authority; public CDS receipt pending SBOM/binary attestation.
[product] deponent
Deponent
[receipt-01]
- pypi-package
- deponent
- pypi-url
- https://pypi.org/project/deponent/
- attestation-status
- registry-backed
- pypi-version
- 0.1.3
- pypi-upload
- 2026-09-26T17:50:27.613657Z
- license
- Apache-2.0
- github-repo
- https://github.com/cjchanh/deponent
- github-status
- verified
- github-sha
- 61f8989e9fae
- github-sha-full
- 61f8989e9faed7508c90f4490b41e525a5657f6c
- github-commit-date
- 2026-09-26T17:21:24Z
- source-status
- working-public-link
- evidence
- Public 0.1.3 release: PyPI artifacts and the v0.1.3 source tag verified.
- boundary
- use_jail=False proves policy and ledger behavior, not OS confinement. Docker is not live-verified. The badge is not an exact source or binary signature. Tamper-evident is not tamper-proof. Research prototype; not a security accreditation.
[product] mildoc-lint
mildoc-lint
[receipt-02]
- pypi-package
- mildoc-lint
- pypi-url
- https://pypi.org/project/mildoc-lint/
- attestation-status
- registry-backed
- pypi-version
- 0.3.0
- pypi-upload
- 2026-06-21T06:35:01.583773Z
- license
- Apache-2.0
- github-repo
- https://github.com/cjchanh/mildoc-lint
- github-status
- verified
- github-sha
- 53867661e204
- github-sha-full
- 53867661e20439f3166584960a879cbac11aa426
- github-commit-date
- 2026-06-21T04:53:42Z
- source-status
- working-public-link
- evidence
- Public 0.3.0 release: PyPI artifacts and the v0.3.0 source tag verified.
- boundary
- 0.3.0 predates the packaging fix on main (34c654d), which is not yet released. Public CI on main is passing (last run 2026-08-12).
[product] sworncode
Sworncode
[receipt-03]
- pypi-package
- sworncode
- pypi-url
- https://pypi.org/project/sworncode/
- attestation-status
- registry-backed
- pypi-version
- 0.4.1
- pypi-upload
- 2026-09-05T05:16:08.839495Z
- license
- Apache-2.0
- github-repo
- https://github.com/cjchanh/sworn
- github-status
- verified
- github-sha
- 89c1ec4731b1
- github-sha-full
- 89c1ec4731b15964e9998adb366f675ba7fb0947
- github-commit-date
- 2026-09-05T04:15:31Z
- source-status
- working-public-link
- evidence
- Published distribution 0.4.1; public source repository verified at the observed SHA.
- boundary
- PyPI 0.4.1 metadata points at the current product page and the public source repository. No Sworn success or clean fail-closed status is claimed.
[product] fleet-watch
Fleet Watch
[receipt-04]
- pypi-package
- fleet-watch
- pypi-url
- https://pypi.org/project/fleet-watch/
- attestation-status
- registry-partial
- pypi-version
- 0.3.0
- pypi-upload
- 2026-09-09T02:31:47.816400Z
- license
- MIT
- github-repo
- https://github.com/cjchanh/fleet-watch
- github-status
- unavailable
- github-sha
- unavailable
- github-sha-full
- unavailable
- github-commit-date
- unavailable
- source-status
- working-public-link
- evidence
- Published distribution 0.3.0 verified on PyPI. The release has no source tag, so no source commit is attested.
- boundary
- Public source; no independent validation, certification, or production-deployment claim is made.
[manifest]
The same data in machine-readable form: /manifest.json.