Provenance Registry Artifact Attestation
ARTIFACT

taao-v1.1.0-artifact1.tar.gz

TAAO / v1.1.0 / taao-v1.1.0-artifact1.tar.gz
Published:

Archive Details

# Download and verify checksum
curl -LO https://artifacts.patterneddesigns.ca/TAAO/v1.1.0/taao-v1.1.0-artifact1.tar.gz
echo "700d0ca80093e90e803ad82b53ccca3fc27e30fc72d28cf093e7ddc712447909  taao-v1.1.0-artifact1.tar.gz" | sha256sum -c

Digests

Content-addressed checksums for verifying artifact integrity.

700d0ca80093e90e803ad82b53ccca3fc27e30fc72d28cf093e7ddc712447909
# Download artifact
curl -O https://artifacts.patterneddesigns.ca/TAAO/v1.1.0/taao-v1.1.0-artifact1.tar.gz

# Verify SHA-256
sha256sum taao-v1.1.0-artifact1.tar.gz
# Expected: 700d0ca80093e90e803ad82b53ccca3fc27e30fc72d28cf093e7ddc712447909

Signatures & Trust

Cryptographic signatures binding this artifact to publisher identities.

AureliaSRS Primary Key
pgp
4096R/ABCD1234
1234 5678 90AB CDEF 1234 5678 90AB CDEF 1234 5678
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEexampleSignatureForTAAOv1.1.0Artifact1
-----END PGP SIGNATURE-----
# Import key
gpg --keyserver keys.openpgp.org --recv-keys 4096R/ABCD1234

# Verify signature
gpg --verify signature.asc artifact.tar.gz

Provenance

Build metadata and supply chain context for this artifact.

GitHub Actions

OS: ubuntu-latest

View Build

Type: github-actions

Workflow: .github/workflows/release.yaml

Commit: 2b8ca76e

Repository

Verification

Verification Passed
Digest Verified:
Signature Verified:
Attestations Verified:
Last Verified:
Verification results are derived and informational. Always perform independent verification using the signatures and digests above.