{"space":"killinchu","khipu_root":null,"count":0,"signing_available":false,"keyid":"szlholdings-cosign","slsa":"L1","doctrine":"v11","pub_fingerprint_sha256":null,"signing_state":{"schema":"szl.signing-state/v1","evidence_class":"DECLARED","scope":"PROCESS_LOCAL_SIGNER_METADATA","runtime_boot_id":null,"generation":null,"observation_sequence":null,"observed_at":null,"age_seconds":null,"max_age_seconds":null,"freshness":"UNKNOWN","verification_key_known":false,"verification_key_scope":"CAPTURED_SHARED_SIGNER_IDENTITY","historical_verification_keys_evaluated":false,"public_key_fingerprint":null,"fingerprint_algorithm":"SHA256_STRIPPED_ASCII_PEM","expected_key_fingerprint":null,"loaded_key_fingerprint":null,"key_agreement":"UNKNOWN","signer_configured":null,"configuration_state":"UNKNOWN","key_source":"unavailable","backend":{"kind":"PROCESS_LOCAL_ECDSA_P256","loaded":false,"state":"UNAVAILABLE","reachability":"NOT_APPLICABLE_LOCAL","operating_capability_observed":false},"key_material_available":false,"permission":{"state":"UNKNOWN","evidence":null},"observed_capability":{"state":"UNKNOWN","evidence":null},"signing_ready":false,"execution_authorized":false,"non_repudiation":"UNKNOWN","non_repudiation_note":"a process-local sign+verify self-test demonstrates signing capability, not key-custody policy; non-repudiation stays UNKNOWN until custody is independently reviewed","source_binding":"UNKNOWN","source_status_endpoint":"/api/a11oy/v1/series-a/status","blockers":["SIGNER_OBSERVATION_UNAVAILABLE","OBSERVATION_CLOCK_INVALID","RUNTIME_BOOT_ID_UNKNOWN","SIGNER_BACKEND_UNAVAILABLE","VERIFICATION_KEY_UNKNOWN","KEY_AGREEMENT_UNKNOWN","PERMISSION_UNOBSERVED","RETAINED_SIGNING_CAPABILITY_UNOBSERVED"],"sign_on_read":false},"verify_key_url":"/cosign.pub","nodes":[],"citations":[{"claim":"Merkle-DAG provenance build","status":"PROVEN","lutar_theorem":"Lutar.DPI.MerkleDAGBuild","lutar_url":"https://github.com/szl-holdings/lutar-lean/blob/main/Lutar/DPI/MerkleDAGBuild.lean","standard":"RFC 6962 Merkle transparency; Sigstore Rekor (Apache-2.0)","arxiv":"RFC 6962"},{"claim":"DPI / provenance soundness","status":"PROVEN","lutar_theorem":"Lutar.DPI.TH6_DPI_Soundness","lutar_url":"https://github.com/szl-holdings/lutar-lean/blob/main/Lutar/DPI/TH6_DPI_Soundness.lean","standard":"in-toto/DSSE; SLSA provenance framework","arxiv":"arXiv:2406.10109"},{"claim":"Composition soundness (W3C trace continuity)","status":"PROVEN","lutar_theorem":"Lutar.Composition.TH1_Composition","lutar_url":"https://github.com/szl-holdings/lutar-lean/tree/main/Lutar/Composition","standard":"W3C Trace Context (traceparent)","arxiv":"arXiv:2406.10109"}],"citation_note":"Provenance/ledger tabs cite real in-tree lutar-lean theorems plus the public standard / arXiv they map to. All cited entries are kernel-verified (PROVEN).","anchor_health_at":"/api/killinchu/uds/v1/rekor/health","honesty":"DSSE signatures are REAL ECDSA-P256-SHA256 cosign sigs when the SZL_COSIGN_PRIVATE_PEM runtime secret is present (else UNSIGNED, labelled). DAG is in-memory per Space (non-persistent across restart). SLSA L1 honest; L2 roadmap via Wire D (signed provenance) — NOT L3 (no hardened CI yet)."}