Artifact identity
| Field | Value | Canonical record |
|---|---|---|
| Artifact type | Acceptance evidence statement JSON | — |
| Test suite | tools/build_site.py and tools/package_release.py preflight | — |
| Test environment | Deterministic build manifest and package preflight | — |
| Reviewer class | repository-automated | — |
| Certification status | Not independent certification | — |
| Generated | 2026-08-06 | — |
Published artifact: /docs/proof/assurance/evi-ae-021-v1.7.0-package-inventory.json
SHA-256: fb0b00e0e35584b52d1419ad92cfbb3c609f0c1306155b7c54a8f769035d323b
Scope and result
Result: PASS
Root source shape, safe paths, manifest-bound public inventory, required review-governance and durable records, and explicit final-archive checksum boundary.
Supported claims
Limitations
- The final ZIP checksum is external to the archive to avoid self-reference.
- Final archive replay is reported in the separately delivered package audit.
- No deployment or host extraction result is asserted.
Review, coverage and expiry
Lifecycle
Supersedes
Superseded by
Invalidation conditions
- Hash mismatch
- Manifest or required-path mismatch
- Post-evidence source mutation
- Failed final package replay
- Expiry without completed review or successor
Revision history
| Revision | Date | Change |
|---|---|---|
| 1.0 | Published the v1.7.0 release-source inventory evidence statement with dated expiry. | |
| 1.1 | Superseded by EVI-AE-026; prior evidence bytes and former scope remain preserved. |
Authority and record status
Responsible authority: National Engineering Directorate.
The hash establishes artifact identity only. The evidence remains bounded by its stated environment, method and limitations.
Revision date: . Public corrections may be initiated through the diplomatic contact route.