{
  "schema": "hf-vanished.provenance.v1",
  "generated_at": "2026-09-19T20:41:05Z",
  "algorithm": "sha256",
  "files": [
    {
      "path": "data/events.json",
      "size": 87415,
      "sha256": "b87574466a9945e34c146bdd075dfb7c2c8567903b63004057908f30c304c1f2"
    },
    {
      "path": "data/state.json",
      "size": 714371,
      "sha256": "7351c1fd80f32fe704178200cd563b834f2586a1eade5f0cdd6c9a1b48a2bf67"
    },
    {
      "path": "data/status.json",
      "size": 520933,
      "sha256": "b6985521524e6d872d4ceed6049a706a7fabcbf68d77918ae68e776b1b4b09be"
    },
    {
      "path": "data/integrations.json",
      "size": 63932,
      "sha256": "866fdf7edb27deb455bc6f3c920b2d60ddf1340ce3b93be36c02535f785413a2"
    },
    {
      "path": "data/reasons.json",
      "size": 557,
      "sha256": "022ac2126b9de562921b16842dd169b09345c39704fc79dfc37f097d4799a831"
    },
    {
      "path": "data/evidence.json",
      "size": 2742966,
      "sha256": "5eda3f1517718ef62c8a2ec82e61c698ee79653ebc07435d95476f7496dfc341"
    },
    {
      "path": "data/manifests.json",
      "size": 595637,
      "sha256": "3dcf7fb10bcae74c6ea4aebcebc60e9022816e8f54f571df91ae011a6e6501c0"
    },
    {
      "path": "data/incidents.json",
      "size": 7935,
      "sha256": "26901dba7006cab476b250bc8a41c78e5f8ea55d32d13e33ae5c07fc70d63fc5"
    },
    {
      "path": "data/lineage.json",
      "size": 116044,
      "sha256": "9ef2e804219b6c6be8103e93fc30d1a15f40a3299e879f45477fe414a587080f"
    },
    {
      "path": "data/analytics.json",
      "size": 1918,
      "sha256": "18a5e9e97c34ec272cfdbf39ee19142aed3c34fea3f983cc2dab8b259173deeb"
    },
    {
      "path": "data/mirrors.json",
      "size": 670,
      "sha256": "a0ff148ec97146a67d8dfe579e68fc5058f3c2d173e11c33250c652673c5716b"
    }
  ],
  "root_sha256": "9db4e493dc677a4ea09c99386de23dbbf564d81f2a1899c562288441621a73e4",
  "signature": {
    "mode": "sigstore-keyless-if-available",
    "bundle_path": "data/provenance.sigstore.json",
    "note": "The digest bundle is always generated. A detached Sigstore bundle is produced by GitHub Actions when keyless signing succeeds."
  }
}