{
  "policy_id": "SYNTHETIC-SOURCE-CROSSCHECK",
  "policy_version": "0.0.0-demo",
  "environment": "DEVELOPMENT",
  "artifact": {
    "artifact_type": "SOURCE_SNAPSHOT",
    "artifact_name": "synthetic-source",
    "artifact_version": "0.0.0-demo",
    "media_type": "text/plain",
    "size_bytes": 26,
    "digest_algorithm": "sha256",
    "artifact_digest": "805ce9420e95548d03e07eb5516739de3b62191fba5018bf88d2a9d137ed0f23",
    "canonicalization_profile": "SYNTHETIC-RAW-BYTES"
  },
  "signatures": [
    {
      "signature_id": "signature:synthetic:not-present",
      "key_id": "key:synthetic:not-present",
      "key_purpose": "DEV_SOURCE",
      "identity_type": "SERVICE",
      "developer_identity_ref": "identity:synthetic:not-verified",
      "organization_ref": "NONE",
      "role_assertion_ref": "NONE",
      "cryptographic_verification_result": "NOT_PERFORMED",
      "signing_time_claimed": "2026-09-07T00:00:00Z",
      "trusted_time_verification_result": "NOT_PERFORMED",
      "revocation_status_at_signing": "ACTIVE",
      "revocation_status_at_verification": "ACTIVE",
      "revocation_evidence_time": "2026-09-07T00:00:00Z",
      "revocation_evidence_ref": "revocation:synthetic:not-verified"
    }
  ],
  "attestations": [
    {
      "attestation_ref": "attestation:synthetic:not-present",
      "attestation_type": "SOURCE_PROVENANCE",
      "subject_digest": "805ce9420e95548d03e07eb5516739de3b62191fba5018bf88d2a9d137ed0f23",
      "predicate_schema": "urn:synthetic:provenance-not-verified",
      "predicate_digest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
      "producer_identity_ref": "identity:synthetic:not-verified",
      "producer_role_ref": "role:synthetic:not-verified",
      "verification_result": "STRUCTURE_ONLY"
    }
  ],
  "verification": {
    "verification_profile_id": "SYNTHETIC-METADATA-CROSSCHECK",
    "verification_time": "2026-09-07T00:10:00Z",
    "verifier_id": "synthetic-local-demo",
    "verifier_version": "0.0.0-demo",
    "open_deviations": [
      "NO_REAL_SIGNATURE",
      "NO_VERIFIED_IDENTITY",
      "NO_VERIFIED_TIME",
      "NO_VERIFIED_REVOCATION"
    ]
  }
}
