From b47dae266a0e3cec8a95c90939aff1510c87bbe0 Mon Sep 17 00:00:00 2001 From: tarikskalic Date: Wed, 5 Aug 2026 06:38:23 +0200 Subject: [PATCH 1/2] evidence(p3): stage reproducible build SHA256SUMS --- .aegis/evidence/p3-reproducible-build-v1/SHA256SUMS | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .aegis/evidence/p3-reproducible-build-v1/SHA256SUMS diff --git a/.aegis/evidence/p3-reproducible-build-v1/SHA256SUMS b/.aegis/evidence/p3-reproducible-build-v1/SHA256SUMS new file mode 100644 index 000000000..4fd5f188c --- /dev/null +++ b/.aegis/evidence/p3-reproducible-build-v1/SHA256SUMS @@ -0,0 +1,9 @@ +2c724562f5656c12d61faaf8e0fd79a5da496a5e46a3c7840768db517fddb279 checkpoint.py +6b4f8aa7c772351412f565437b44729cd8c073bf5929ed2e75f65e8667e522c6 deploy_verify.py +ba303acbd8e944126ed0bbeaee5c49016736285e8e41eb46a39721c9e168754e package_deterministic_bundle.py +04697bfa709707ae398951fee577def79357a8399551f5bb2b4292f1d87dafc2 phase23_manifest.json +4e66901570f48d4c05fbe2dd25efa7c4999bf8b0d12c5cb0fc474f2231b318f4 runner.py +73892cbfaaa849d5f6c9ddfa2b03109d72a71706cb83be6628070f65b7834166 state.py +f26ec6829ea0683dcfea6ff22ec7ac2320be14b8e80f06708713761f7e2b12e6 target_deployment.json +d73509bf215ff14bf91cc0232fe69a1b80cbf9a68edd305aa0a0c09ea59c3a5d target_reproducible_bundle.tar.gz +d370a64514c17df365872b58d2476a7a8927c8a127ecf44bd12fc7a09305a9b8 telemetry.py From 2b72bc832430d38dda86599600d710d2d4f7658a Mon Sep 17 00:00:00 2001 From: tarikskalic Date: Wed, 5 Aug 2026 06:39:13 +0200 Subject: [PATCH 2/2] evidence(p3): bind reproducible build hash manifest to commit --- .../COMMIT_BINDING_RECEIPT_v1.6.1.json | 38 +++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .aegis/evidence/p3-reproducible-build-v1/COMMIT_BINDING_RECEIPT_v1.6.1.json diff --git a/.aegis/evidence/p3-reproducible-build-v1/COMMIT_BINDING_RECEIPT_v1.6.1.json b/.aegis/evidence/p3-reproducible-build-v1/COMMIT_BINDING_RECEIPT_v1.6.1.json new file mode 100644 index 000000000..f92d10543 --- /dev/null +++ b/.aegis/evidence/p3-reproducible-build-v1/COMMIT_BINDING_RECEIPT_v1.6.1.json @@ -0,0 +1,38 @@ +{ + "receipt_version": "1.6.1", + "repository": "Aegis-Omega/AEGIS-OMEGA", + "branch": "agent/p3-reproducible-build-binding-v1", + "base_commit_sha": "0bdffe75b56e5cd27c0632e1ba166620da327494", + "source_commit": { + "commit_sha": "b47dae266a0e3cec8a95c90939aff1510c87bbe0", + "tree_sha": "65458dec7143251c5bee76eab1fd1a2c2ff36d35", + "committed_at": "2026-08-05T04:38:23Z", + "signature_status": "UNSIGNED" + }, + "sha256sums": { + "path": ".aegis/evidence/p3-reproducible-build-v1/SHA256SUMS", + "git_blob_sha": "4fd5f188cfc743635fb58f7ee66385696e49c26d", + "content_sha256": "30e049f7e14de732a2180cc931700a003f6fb6d79ecc540f341954a897670634" + }, + "authoritative_bundle": { + "filename": "target_reproducible_bundle.tar.gz", + "sha256": "d73509bf215ff14bf91cc0232fe69a1b80cbf9a68edd305aa0a0c09ea59c3a5d", + "repository_storage_policy": "RELEASE_OR_CI_ARTIFACT_NOT_COMMITTED" + }, + "bundler_provenance": { + "filename": "package_deterministic_bundle.py", + "version": "1.0.0", + "sha256": "ba303acbd8e944126ed0bbeaee5c49016736285e8e41eb46a39721c9e168754e", + "git_blob_binding": "PENDING_SOURCE_BYTES" + }, + "deployment_manifest": { + "filename": "target_deployment.json", + "sha256": "f26ec6829ea0683dcfea6ff22ec7ac2320be14b8e80f06708713761f7e2b12e6", + "git_blob_binding": "PENDING_SOURCE_BYTES" + }, + "working_tree_dirty_state": "NOT_ATTESTED_BY_REMOTE_GIT_API", + "binding_state": "HASH_MANIFEST_COMMIT_BOUND", + "full_reproducible_build_binding": "PENDING_BUNDLER_AND_MANIFEST_SOURCE_BYTES", + "distributed_target_admission": "NOT_ESTABLISHED", + "verdict": "PARTIAL_COMMIT_BINDING_ESTABLISHED" +}