# PubLedge Content Provenance Manifest
#
# Tracks SHA-256 hashes of canonical PubLedge source content for tamper
# detection and reproducibility. Run `./scripts/validate-hashes.sh` to
# verify, or `./scripts/validate-hashes.sh --update` to recompute after
# intentional edits.
#
# Hash mechanism adapted from skill-provenance (https://skillprovenance.dev).
# PubLedge uses only the integrity pattern, not the full protocol.
#
# Hashed scope:
#   - Protocol, security, verification, changelog, and contribution prose
#   - Project/package/MCP configuration
#   - Agent guidance, hand-authored site sources, and shared browser assets
#   - MCP server, build, validation, eval, and CI workflow code
#   - All canonical data/examples authorities, instruments, obligations, mapping
#   - Templates, schemas, JSON-LD context, and vendored gist snapshot files
#   - License and attribution files
#
# Excluded scope:
#   - Build outputs (docs/)
#   - Generated feeds/API/sitemaps
#   - Editor / OS artifacts
#   - This file (MANIFEST.yaml is the control file)
#   - Workshop scratchpad (_workshop/)

bundle: publedge
bundle_version: 0.2.1
bundle_date: 2026-08-04
description: >
  PubLedge open recordkeeping protocol for fact-specific written
  interpretations between two parties.

upstream:
  - name: skill-provenance
    url: https://skillprovenance.dev
    used_for: hash mechanism only
  - name: gist (Semantic Arts)
    url: https://semanticarts.com/gist/
    used_for: upper ontology binding
    pinned_at: vendor/gist/gistCore.ttl

files:
  - path: .gitattributes
    role: config
    hash: sha256:fbf70ef7fa70580dceb6fcf506e8ae5d43008a8f7f07782939318ab230d23be1
    note: .gitattributes

  - path: data/examples/authorities/cfpb.md
    role: authority
    hash: sha256:65d858460f28a4228125b92d6f62fcb3f11bf12de93e1c2be2a43ac5fe3f867c
    note: data/examples/authorities/cfpb.md

  - path: data/examples/authorities/cftc-dsio.md
    role: authority
    hash: sha256:126e57d5bf9d9bfea26c9e786e8a94c7fa10192266ee370520296d82f1ffc38c
    note: data/examples/authorities/cftc-dsio.md

  - path: data/examples/authorities/colorado-legislature.md
    role: authority
    hash: sha256:0d68ee947e991028afc28e4f4defd6578d991204b693bb04bd0b14579174da32
    note: data/examples/authorities/colorado-legislature.md

  - path: data/examples/authorities/irs-chief-counsel.md
    role: authority
    hash: sha256:140ce6fb936c2a1680bc861e8f2a35648a37a6e5d3a362526b1ff72616e1cab9
    note: data/examples/authorities/irs-chief-counsel.md

  - path: data/examples/authorities/irs-tege.md
    role: authority
    hash: sha256:cb3dbe7a81caab15581f97a431c72a4263bf1153fe72893eca2a062e8452ea03
    note: data/examples/authorities/irs-tege.md

  - path: data/examples/authorities/sec-corpfin.md
    role: authority
    hash: sha256:a607fa1dc00920969072a3d12b038ff41f7c2e3b077182a4488ef31a93ead586
    note: data/examples/authorities/sec-corpfin.md

  - path: data/examples/authorities/utah-legislature.md
    role: authority
    hash: sha256:627652d3301589e33a0dc71818f096fc34679c08c65b671882c68e1698dff148
    note: data/examples/authorities/utah-legislature.md

  - path: data/examples/authorities/utah-oaip.md
    role: authority
    hash: sha256:e3f8e81c7f83fff77637ea432e5c3e4830515ed35b860d4055f69879e15308ed
    note: data/examples/authorities/utah-oaip.md

  - path: .github/workflows/build.yml
    role: ci
    hash: sha256:24d810bc3e6f9810611b9dbb8d5f69f505c1ff801f4bd13178e0bb28974f2a16
    note: .github/workflows/build.yml

  - path: .github/workflows/verify.yml
    role: ci
    hash: sha256:b025a1f5d72f270034380cbf181a0782b9b8a9a81cd94d43414b589677cf0079
    note: .github/workflows/verify.yml

  - path: .github/ISSUE_TEMPLATE/authority_response.md
    role: contribution
    hash: sha256:ba62e08eacb1bf260500e293291383e124649f7a0cdcb2169a3f7b6943968bcc
    note: .github/ISSUE_TEMPLATE/authority_response.md

  - path: .github/ISSUE_TEMPLATE/bug_report.md
    role: contribution
    hash: sha256:ef754264bf62b3ac7aff3f0e60f58bb6d9aea97d44650b5bc913f745cac41f87
    note: .github/ISSUE_TEMPLATE/bug_report.md

  - path: .github/ISSUE_TEMPLATE/config.yml
    role: contribution
    hash: sha256:1e66b48d94f0972cef1542a83d6fc430d081839002ba84b237ef2ba19a9d4bb9
    note: .github/ISSUE_TEMPLATE/config.yml

  - path: .github/ISSUE_TEMPLATE/feature_request.md
    role: contribution
    hash: sha256:a186f48f239f45984711e8ad33394ffb92daa5cfe75387a7f3bc9273eff0a6c1
    note: .github/ISSUE_TEMPLATE/feature_request.md

  - path: mcp.json
    role: config
    hash: sha256:c4eeab49387e1bf3a17687bb0eaa2d50ba54aa79c4125ca01a0a2895b1b0d2b4
    note: mcp.json

  - path: server.json
    role: config
    hash: sha256:12123e0ad99900628a8ea95da8aedeb7bc24a5507d429553410d2e3a9e11a60b
    note: server.json

  - path: package.json
    role: config
    hash: sha256:e77a3fdecb796c0f3cdd1fb87345e65afbb5afdad44b12340f5af0634e54e6df
    note: package.json

  - path: package-lock.json
    role: config
    hash: sha256:012ebe8338a006f4f4e3552d8b061074ec34840b25e4ef309519df51f22f2156
    note: package-lock.json

  - path: project.yml
    role: config
    hash: sha256:670e8d8cb4c700da01242a275b79e49591b5c8c45e69ed7e4a4f377faaa271c9
    note: project.yml

  - path: data/examples/instruments/us-cfpb-ao-2022-001.md
    role: instrument
    hash: sha256:554698950a65f1295dbc1e9dee3fcb63a05ebf6e91817259672433a9e57d0d78
    note: data/examples/instruments/us-cfpb-ao-2022-001.md

  - path: data/examples/instruments/us-cftc-dsio-il-2017-001.md
    role: instrument
    hash: sha256:5444aafef21202fef44ba70c565199429f855c5cae3b9ca76dea2fe60ad2716e
    note: data/examples/instruments/us-cftc-dsio-il-2017-001.md

  - path: data/examples/instruments/us-co-legislature-statute-2024-sb24-205.md
    role: instrument
    hash: sha256:10b736f834e46de7c3460da4636a96a0f7ca6bd4c2822c35a75cf54b3adc1a97
    note: data/examples/instruments/us-co-legislature-statute-2024-sb24-205.md

  - path: data/examples/instruments/us-co-legislature-statute-2025-sb25b-004.md
    role: instrument
    hash: sha256:6c67819684efb6f302a4214d633fba7e70252fd3c3ee9eecdb18405245f465cc
    note: data/examples/instruments/us-co-legislature-statute-2025-sb25b-004.md

  - path: data/examples/instruments/us-co-legislature-statute-2026-sb26-189.md
    role: instrument
    hash: sha256:ccd50a71a23a1a75a1b6dd47768d98ecc5fd9fe5a4a3e44cf08b3a120d47b759
    note: data/examples/instruments/us-co-legislature-statute-2026-sb26-189.md

  - path: data/examples/instruments/us-irs-chief-counsel-plr-2025-001.md
    role: instrument
    hash: sha256:fdb1b3b30e3302f8dbb9251404c797e85c6e65afa0766e9cee688abd0b62ea8e
    note: data/examples/instruments/us-irs-chief-counsel-plr-2025-001.md

  - path: data/examples/instruments/us-irs-tege-plr-2026-001.md
    role: instrument
    hash: sha256:69ec685c082f53120e5efa8614086b800ecc48be8cbb5a4cd4560390ac95823d
    note: data/examples/instruments/us-irs-tege-plr-2026-001.md

  - path: data/examples/instruments/us-sec-corpfin-nal-2025-001.md
    role: instrument
    hash: sha256:f180079d030d1e75c7d3680e9e2b4cd0676e0a336d33e01a5b3c8701da734d23
    note: data/examples/instruments/us-sec-corpfin-nal-2025-001.md

  - path: data/examples/instruments/us-ut-legislature-statute-2024-sb149.md
    role: instrument
    hash: sha256:245dc17c39eb7f7cab01918286c67dfe1f8ba6c7b34a3800835ffd180c7ff941
    note: data/examples/instruments/us-ut-legislature-statute-2024-sb149.md

  - path: data/examples/instruments/us-ut-legislature-statute-2025-hb452.md
    role: instrument
    hash: sha256:3a793ef60b0746232aa436aaa4e5eccb5604dc716c314cd1045b5fa6578968b9
    note: data/examples/instruments/us-ut-legislature-statute-2025-hb452.md

  - path: data/examples/instruments/us-ut-legislature-statute-2025-sb226.md
    role: instrument
    hash: sha256:518882b00ebe9515a3f4697a2da41a607c506c8d844a31895dcf1851d0f5dd3a
    note: data/examples/instruments/us-ut-legislature-statute-2025-sb226.md

  - path: data/examples/instruments/us-ut-legislature-statute-2025-sb332.md
    role: instrument
    hash: sha256:97e8084f429a9565d1b7e2d4eeb6ab7cb0d16c63762838c30c18afde1f436a83
    note: data/examples/instruments/us-ut-legislature-statute-2025-sb332.md

  - path: data/examples/instruments/us-ut-legislature-statute-2026-hb320.md
    role: instrument
    hash: sha256:111b246cf8bb2b1118face419aa81634e3eba290346e98be8e47761d2a8345d5
    note: data/examples/instruments/us-ut-legislature-statute-2026-hb320.md

  - path: data/examples/instruments/us-ut-oaip-jia-2026-001.md
    role: instrument
    hash: sha256:1c73dcfdf1dc9dc14040426990fdd43ea4db8615ca0523c2914d7fda1e40d740
    note: data/examples/instruments/us-ut-oaip-jia-2026-001.md

  - path: data/examples/instruments/us-ut-oaip-rma-2024-001.md
    role: instrument
    hash: sha256:a29675f7c74f702d213cb8002adfc5684d33ffa5137341c4db831441f129ef07
    note: data/examples/instruments/us-ut-oaip-rma-2024-001.md

  - path: data/examples/instruments/us-ut-oaip-rma-2025-001.md
    role: instrument
    hash: sha256:c9354f6299bdd94e42134d1b8017ba6e5d4756c70fc61ff1eaf364a495848617
    note: data/examples/instruments/us-ut-oaip-rma-2025-001.md

  - path: data/examples/instruments/us-ut-oaip-rma-2025-002.md
    role: instrument
    hash: sha256:ffc809635be8cadbe5ffa2d6695ee36f9193a6bb90fc191d8ff3e96cd1586e14
    note: data/examples/instruments/us-ut-oaip-rma-2025-002.md

  - path: data/examples/instruments/us-ut-oaip-rma-2026-001.md
    role: instrument
    hash: sha256:d9942ac7d573be8ea95f9bcba5f06d058b827ca69624601dba9a30990581fa2a
    note: data/examples/instruments/us-ut-oaip-rma-2026-001.md

  - path: ATTRIBUTION.md
    role: legal
    hash: sha256:29fa94ac52d43bd593f3fcd15312d33c031c3ce4d7bb3f9fbbf1b8b29b6b4a60
    note: ATTRIBUTION.md

  - path: LICENSE
    role: legal
    hash: sha256:17298902087045c8684d1be30cf0e921bb5c52167201d148cc002eaa0763e7cb
    note: LICENSE

  - path: LICENSE-APACHE
    role: legal
    hash: sha256:3cbeb832e52ede2c154d4977567b70f204a853342e51d843458f9b785771f069
    note: LICENSE-APACHE

  - path: LICENSE-CC-BY-4.0
    role: legal
    hash: sha256:62a68518848c2fdcd108ff5cc11ba1516440c507bf425d5e76ad36886fd5752a
    note: LICENSE-CC-BY-4.0

  - path: data/examples/mapping/index.yml
    role: mapping
    hash: sha256:5639fdae1b293eba261b165c4ba8c0ecc68c3d81e7c594ebc1601ec397ad6cf3
    note: data/examples/mapping/index.yml

  - path: data/examples/obligations/admt-60-day-cure-period.md
    role: obligation
    hash: sha256:3ae66773fe8227d53bc56ec437490fc69995b36fff76a07e61b185566b05d369
    note: data/examples/obligations/admt-60-day-cure-period.md

  - path: data/examples/obligations/admt-correction-and-human-review.md
    role: obligation
    hash: sha256:f486f4a6477fb599d903b35b1f4126e250e987990c8adb9870d5daf33197da2d
    note: data/examples/obligations/admt-correction-and-human-review.md

  - path: data/examples/obligations/admt-deployer-3-year-record-retention.md
    role: obligation
    hash: sha256:c6b1f8b63111fb7a32fbfa5ecafb32d4a1504b774ad614c79930e868883ed301
    note: data/examples/obligations/admt-deployer-3-year-record-retention.md

  - path: data/examples/obligations/admt-deployer-pre-decision-notice.md
    role: obligation
    hash: sha256:5c9b963aa84427ff4564a45d603d2c74ec305ab43819342d6e811e6f41e474bf
    note: data/examples/obligations/admt-deployer-pre-decision-notice.md

  - path: data/examples/obligations/admt-developer-documentation-to-deployer.md
    role: obligation
    hash: sha256:94df66d03bc7071b6b764053a3c7e6f5ec0ac7d81beb072e2ee152a319e3e31c
    note: data/examples/obligations/admt-developer-documentation-to-deployer.md

  - path: data/examples/obligations/admt-post-adverse-explanation-30-days.md
    role: obligation
    hash: sha256:5a92a40bd35daf97ddedceee5e9d2f34109dccc5dd40fdcbc670c0d6ce3f1bdd
    note: data/examples/obligations/admt-post-adverse-explanation-30-days.md

  - path: data/examples/obligations/ai-authorized-rx-renewal.md
    role: obligation
    hash: sha256:1c1c958c5b4e5748a1f7c5ed6ca48e9b0d5bb2690f34b88bad37b6ec014df492
    note: data/examples/obligations/ai-authorized-rx-renewal.md

  - path: data/examples/obligations/ai-defense-elimination.md
    role: obligation
    hash: sha256:ecda85918d33c2ebe2345f5cdef1e78e25f533d645c3efa2d7402022cf2bba33
    note: data/examples/obligations/ai-defense-elimination.md

  - path: data/examples/obligations/cfpb-pay-to-pay-fee-prohibited.md
    role: obligation
    hash: sha256:51d12024f6a0736ed3f5d56ca24c94b133cc657f0a1ebdffca8ce77a185252d0
    note: data/examples/obligations/cfpb-pay-to-pay-fee-prohibited.md

  - path: data/examples/obligations/cftc-unbundled-fee-not-cta-trigger.md
    role: obligation
    hash: sha256:ffc5f6d3eb79c74a4a8bff911749a594b1747848f6673ead12ddf2c4a34118e6
    note: data/examples/obligations/cftc-unbundled-fee-not-cta-trigger.md

  - path: data/examples/obligations/chatbot-data-no-third-party-sharing.md
    role: obligation
    hash: sha256:0e5686bc0715dbb79dbf24b558e381bb1803109061e8e3a930b82c011a8d2240
    note: data/examples/obligations/chatbot-data-no-third-party-sharing.md

  - path: data/examples/obligations/chatbot-safety-policy-filing.md
    role: obligation
    hash: sha256:64d1121bd3ffbe629f4ea714deee5bd9ac05371f8492487128fbe4a8de8f0b2e
    note: data/examples/obligations/chatbot-safety-policy-filing.md

  - path: data/examples/obligations/dentacor-58-69-5-enforcement-forborne.md
    role: obligation
    hash: sha256:cd1f03c55b4ca26b7327a692c2ff3652a7993f2e27dfc7f4f230a124b81088f7
    note: data/examples/obligations/dentacor-58-69-5-enforcement-forborne.md

  - path: data/examples/obligations/dentacor-hygienist-ai-concurrence-diagnosis.md
    role: obligation
    hash: sha256:2ae0e1613ccbcaf975fc31e4e87301c6cdc224f6cbe5c8f4647cffa056102005
    note: data/examples/obligations/dentacor-hygienist-ai-concurrence-diagnosis.md

  - path: data/examples/obligations/dentacor-informed-consent-no-dentist.md
    role: obligation
    hash: sha256:2d478f847c2099609c19cc36a03fb69e6a7c2402743221589a73e4440d984f34
    note: data/examples/obligations/dentacor-informed-consent-no-dentist.md

  - path: data/examples/obligations/disclose-genai-high-risk-proactive.md
    role: obligation
    hash: sha256:894ec6c5333740656a3f50a3dec3cdb95ceeb60642a95c225a2fe9d8e51823f5
    note: data/examples/obligations/disclose-genai-high-risk-proactive.md

  - path: data/examples/obligations/disclose-genai-on-first-session.md
    role: obligation
    hash: sha256:964a825c8ad92c8e5a59ceda27d05433bd145b2b381af9edb7f6309681a55b71
    note: data/examples/obligations/disclose-genai-on-first-session.md

  - path: data/examples/obligations/disclose-genai-on-request.md
    role: obligation
    hash: sha256:975530c0feb4bacd2989f3e1494c8f9cbe61dd4bbb1569c866490c6de88d514a
    note: data/examples/obligations/disclose-genai-on-request.md

  - path: data/examples/obligations/elizachat-phased-rollout.md
    role: obligation
    hash: sha256:13cde226a2cf2eac0ab39fcef192fbf2df234a03169eaccc1d0f230b52290963
    note: data/examples/obligations/elizachat-phased-rollout.md

  - path: data/examples/obligations/elizachat-pre-access-disclosure-bundle.md
    role: obligation
    hash: sha256:44ccb58a19ec9ebb04c917de3e9b65ecb0cf3fdccad3464e3309f8818ff254b1
    note: data/examples/obligations/elizachat-pre-access-disclosure-bundle.md

  - path: data/examples/obligations/high-risk-ai-consumer-notice-correction-and-appeal.md
    role: obligation
    hash: sha256:f5e4044bc0cb4df6b0557ca4ddd590b3e54ab7ad17a335199546de540766595b
    note: data/examples/obligations/high-risk-ai-consumer-notice-correction-and-appeal.md

  - path: data/examples/obligations/high-risk-ai-impact-assessment.md
    role: obligation
    hash: sha256:b8c140fb89d6af8d41bc7fee6eab97604dfbd96e59115157e0f7853c07461f8d
    note: data/examples/obligations/high-risk-ai-impact-assessment.md

  - path: data/examples/obligations/high-risk-ai-reasonable-care-against-algorithmic-discrimination.md
    role: obligation
    hash: sha256:abbebe1c291c7e7f138f65789b8b1049a3b12358744ff5c096dfc5f18ea4d32a
    note: data/examples/obligations/high-risk-ai-reasonable-care-against-algorithmic-discrimination.md

  - path: data/examples/obligations/irs-501c3-dual-test-failure.md
    role: obligation
    hash: sha256:5ce0eca27a7e1667dd20127a3d44b16c2eee2e9743c0040ca12200dd9c12eb58
    note: data/examples/obligations/irs-501c3-dual-test-failure.md

  - path: data/examples/obligations/irs-incentive-fee-not-net-profits-share.md
    role: obligation
    hash: sha256:1c9983092b7376d8b5cd77875258ba481868733260f4f2fe737793cd840a9f81
    note: data/examples/obligations/irs-incentive-fee-not-net-profits-share.md

  - path: data/examples/obligations/learning-lab-agreement-participation.md
    role: obligation
    hash: sha256:efeebe2f9d9c60fcfc09d9cdddc438f311e27a5064b2d999d490d1835f67b45b
    note: data/examples/obligations/learning-lab-agreement-participation.md

  - path: data/examples/obligations/named-prescriber-enforcement-forborne.md
    role: obligation
    hash: sha256:9bc50212ab23b5d835c423f3639e384f25ada45855f2c438e27f80bfef616083
    note: data/examples/obligations/named-prescriber-enforcement-forborne.md

  - path: data/examples/obligations/rma-data-security-63a-19-102.md
    role: obligation
    hash: sha256:47742ea984d63c4ae681769ea4d67af7c307e03c45d8596140c1869cb23c0bce
    note: data/examples/obligations/rma-data-security-63a-19-102.md

  - path: data/examples/obligations/rma-end-of-term-report.md
    role: obligation
    hash: sha256:89e3fab13db9f25e91739c403d61e49a4ea156e9981f5f90308b803ad96ff48d
    note: data/examples/obligations/rma-end-of-term-report.md

  - path: data/examples/obligations/rma-hold-harmless-state.md
    role: obligation
    hash: sha256:3ce13b00c8cb739e6e84bbf25a198488279879c81176d75cf7e6848241a5417a
    note: data/examples/obligations/rma-hold-harmless-state.md

  - path: data/examples/obligations/rma-incident-notification-24hr.md
    role: obligation
    hash: sha256:71225c15b25daadc963ff150a3d7c8f7440ddcf79786aacaf2c6e941edcdbe3a
    note: data/examples/obligations/rma-incident-notification-24hr.md

  - path: data/examples/obligations/rma-monthly-report-to-oaip.md
    role: obligation
    hash: sha256:931f6cb88887afd010f86d2c609a115504274d427da7599ccecc31a584fa8b31
    note: data/examples/obligations/rma-monthly-report-to-oaip.md

  - path: data/examples/obligations/rma-no-advertising-reference.md
    role: obligation
    hash: sha256:cfd94c1c80489e8effb883823a7ad555d7d83ca431e61d6eab9330c4558a81f2
    note: data/examples/obligations/rma-no-advertising-reference.md

  - path: data/examples/obligations/sec-reg-d-506c-verification-safe-harbor.md
    role: obligation
    hash: sha256:c562ee10857f5ab070bf08c3ef07afcfad5f8b7797d59cebbc3b2c78360dbc9b
    note: data/examples/obligations/sec-reg-d-506c-verification-safe-harbor.md

  - path: data/examples/obligations/telehealth-compliance-per-proposal.md
    role: obligation
    hash: sha256:7fc842d907a39f82bfca7bf5380ba6887404ff5693e1b473d807b424ffe49af0
    note: data/examples/obligations/telehealth-compliance-per-proposal.md

  - path: CHANGELOG.md
    role: protocol
    hash: sha256:f684011ef270286aaf911b03ebd3d44237471feb0f78e1c7c5b79ab4f0573bd4
    note: CHANGELOG.md

  - path: CONTRIBUTING.md
    role: protocol
    hash: sha256:341fc1ea496129ffb33ba3a9e89d737775ebba40122f252f24bb9048d19443fc
    note: CONTRIBUTING.md

  - path: DEFINITIONS.md
    role: protocol
    hash: sha256:68907cf92cc224b13e6445a505e9432bf74103cd0c8cf6473c75d808776a675b
    note: DEFINITIONS.md

  - path: PRIOR-ART.md
    role: protocol
    hash: sha256:38af1101db25dac94fd7e76dbed559cde7db3f2df7b1af1ad1262f6066964e19
    note: PRIOR-ART.md

  - path: PROTOCOL.md
    role: protocol
    hash: sha256:9a49e7a3ea098c5fa5c1d9f82e00fb16831ed2d8535fb36a3bff850de2c822f0
    note: PROTOCOL.md

  - path: README.md
    role: protocol
    hash: sha256:cb543402a56ca10331556e5c0096864363f0187a0363fd2a3613344693bec752
    note: README.md

  - path: RELEASE_NOTES-v0.2.1.md
    role: release-notes
    hash: sha256:39d4cb973ff70b86324e6d39050709236a385023eedd831731eeee84b6acc2fc
    note: RELEASE_NOTES-v0.2.1.md

  - path: ROADMAP.md
    role: protocol
    hash: sha256:22e6821afc9ecefec407dd500ddc21cd2ee4c14d9f2d82e00183701f6bbd9a3e
    note: ROADMAP.md

  - path: INTENT.md
    role: protocol
    hash: sha256:06f6acd5b53c12b8cb559f914ac75020ce154f6c0cb4d78d63df4285c85f009e
    note: INTENT.md

  - path: SECURITY.md
    role: protocol
    hash: sha256:b0c1e1712469d0799eb605b9c32ae3d3222773db73c954ed186c500965730653
    note: SECURITY.md

  - path: VERIFICATION.md
    role: protocol
    hash: sha256:eafeded6cdd7c3547d4c40818b8c42ac4990dbbeecef598c2b892167df9753be
    note: VERIFICATION.md

  - path: schema/context.jsonld
    role: schema
    hash: sha256:404c258aefcd446f4272593639d788ee808089b9c1b5a7d793f4322290ff0373
    note: schema/context.jsonld

  - path: schema/instrument.schema.json
    role: schema
    hash: sha256:9d2411b4a4022bc1174f3b9f09df60297e3a40da51f279e173e6dcb20044f05a
    note: schema/instrument.schema.json

  - path: schema/obligation-record.schema.json
    role: schema
    hash: sha256:81e02ac35b121985b75e95f290d53b2b356d5a4231bafd39e12b8f09f54bf98c
    note: schema/obligation-record.schema.json

  - path: schema/jia.schema.json
    role: schema
    hash: sha256:317e47143a373e8ef5a984e55caeb3200b4ee6f69046be04542f663230b33985
    note: schema/jia.schema.json

  - path: schema/rma.schema.json
    role: schema
    hash: sha256:d2f35ee20ff0321cb8ccaffeb26437921b1f0ca3a6c49332efa747ce0efe3b08
    note: schema/rma.schema.json

  - path: _templates/jia/utah-mental-health-chatbot-advertising.md
    role: template
    hash: sha256:abdbbda3d7e27192c7b4fc56eeef2955b30ba3299d91e26427533fbdda5dd24a
    note: _templates/jia/utah-mental-health-chatbot-advertising.md

  - path: _templates/jia/utah-mental-health-chatbot-data-protection.md
    role: template
    hash: sha256:0afbd845562e9c429b76405aed8aab8d0122cd49d31cfcbc788820e27d18d790
    note: _templates/jia/utah-mental-health-chatbot-data-protection.md

  - path: _templates/jia/utah-mental-health-chatbot-first-session-disclosure.md
    role: template
    hash: sha256:06c8af8195570988c51e8f5e375c5d2082a4957720e5a06b3e3c73e99ffdf141
    note: _templates/jia/utah-mental-health-chatbot-first-session-disclosure.md

  - path: _templates/rma/utah-ai-sandbox-mitigation-mental-health-chatbot.md
    role: template
    hash: sha256:662ebe7515575d8fae1364614272fee3c60f3c9b06653f6b4d33ee22602ccbbb
    note: _templates/rma/utah-ai-sandbox-mitigation-mental-health-chatbot.md

  - path: _templates/rma/utah-genai-safe-harbor-enrollment.md
    role: template
    hash: sha256:5b7fe3e084251572f34d64df5325eb264098868cfc4c714dc714c9c849d96673
    note: _templates/rma/utah-genai-safe-harbor-enrollment.md

  - path: mcp-server.js
    role: tooling
    hash: sha256:31253104f9a377d7e150c5866296e7e41b0f144b42db10b012bd973577a6f689
    note: mcp-server.js

  - path: scripts/build-extras.js
    role: tooling
    hash: sha256:9831c1612d51f36ba9862bb03122d05e47ae8fe63242a76e50d58354a9bcb27a
    note: scripts/build-extras.js

  - path: scripts/build.js
    role: tooling
    hash: sha256:88890269d41d9d9a1710ac2e52f33fc7a8ad6d9f537b725525f3c52eeb897bfc
    note: scripts/build.js

  - path: scripts/check-links.js
    role: tooling
    hash: sha256:62d2f15099cf1c010af987cdb115737120f60a6acfb918ed08017b4486168860
    note: scripts/check-links.js

  - path: scripts/check-of-version.js
    role: tooling
    hash: sha256:050ecafec52063c2aa7bf9995492f6d37a066cece15400b1b4586288a3d16a7d
    note: scripts/check-of-version.js

  - path: scripts/check-of-fingerprint.js
    role: tooling
    hash: sha256:158614b6fe6404a68065080becb52fcd0acf1f3320de9a5dc8e702f11b30120c
    note: scripts/check-of-fingerprint.js

  - path: scripts/check-of-continuity.js
    role: tooling
    hash: sha256:464d8dfa897f0ae64165bb5e9f4065e32e1e839cf3e3e0e8c578cd5a0727f49f
    note: scripts/check-of-continuity.js

  - path: scripts/eval-authority-response.js
    role: tooling
    hash: sha256:2ab5c581afe0b5acb8ceb8dc341ce0a926087f4953348e761747ae146a0d7fa6
    note: scripts/eval-authority-response.js

  - path: scripts/eval-clean-build.js
    role: tooling
    hash: sha256:2264a39deece78a8d03f21a0dd4445cef9fb00ed0a8fb10ffeb9a4f467b59fdc
    note: scripts/eval-clean-build.js

  - path: scripts/eval-content-source.js
    role: tooling
    hash: sha256:4bd3d13521cf9fc6b96b67a39c4a6fa2da83f3121fa97227e7f858c5d6b3fe40
    note: scripts/eval-content-source.js

  - path: scripts/eval-deterministic-build.js
    role: tooling
    hash: sha256:b88175b24a60a4bf6ef1c37fa5591b03c080a4444992aa35a9a8e6e462aca067
    note: scripts/eval-deterministic-build.js

  - path: scripts/eval-discovery-contract.js
    role: tooling
    hash: sha256:5953962d8243588d407f939c5c5886ff9463bf2ea7afb999989df4285d476dc3
    note: scripts/eval-discovery-contract.js

  - path: scripts/eval-format-contracts.js
    role: tooling
    hash: sha256:e260d734dd2f5efe6b4304c1d5d326f92d4510959fd93471d6f2784d5ad86328
    note: scripts/eval-format-contracts.js

  - path: scripts/eval-generated-tree-parity.js
    role: tooling
    hash: sha256:9ba17e07af0b26c32ebbe23e1ee04ee2c0b69be9374764bee8d3d535356220dd
    note: scripts/eval-generated-tree-parity.js

  - path: scripts/eval-discovery.js
    role: tooling
    hash: sha256:d00f8c81ed4d029e17bdd007ae999f991739599aa77479f1ca524243cfed3367
    note: scripts/eval-discovery.js

  - path: scripts/eval-links.js
    role: tooling
    hash: sha256:09a513d8404bb7b61c9545bb7c5230931ca11e6752d15fc6cd5da3812757fca7
    note: scripts/eval-links.js

  - path: scripts/eval-instrument-schema.js
    role: tooling
    hash: sha256:d8b5ca333b134ea0f0c0cfce5ff95a24f7fc9d6134c999eba210afcf74e4a8bc
    note: scripts/eval-instrument-schema.js

  - path: scripts/eval-obligation-schema.js
    role: tooling
    hash: sha256:6b5148dd8c9c00fd22bd35ac8ede6eaf3ba23dbaaef204795cc85d4b6bd9ca17
    note: scripts/eval-obligation-schema.js

  - path: scripts/eval-manifest-scope.js
    role: tooling
    hash: sha256:80a27414ad4d3d74d9f9cf865eb7e37c7813e3c68c70a23548e8b54ad9ea5fb0
    note: scripts/eval-manifest-scope.js

  - path: scripts/eval-mcp-contract.js
    role: tooling
    hash: sha256:f8a430d8b84a23ea8a09c54cf972f7e03f32635bca2dfa775b0220c7ed3f05c0
    note: scripts/eval-mcp-contract.js

  - path: scripts/eval-mcp-parser-lockstep.js
    role: tooling
    hash: sha256:2d21cef5788ddd545a5e4ee4965132ee6cb00b991e00ab3ef08a3118faf70779
    note: scripts/eval-mcp-parser-lockstep.js

  - path: scripts/eval-package-smoke.js
    role: tooling
    hash: sha256:c127a73ffc33f80dc037a768e3a9675d50f7912219f6f7440b5280d5fc1a962e
    note: scripts/eval-package-smoke.js

  - path: scripts/eval-obligation-first-binding.js
    role: tooling
    hash: sha256:7b2c80c741afc7ac5c7b97dc732697f6b74813b22eef0a89c5533020d973ddee
    note: scripts/eval-obligation-first-binding.js

  - path: scripts/eval-parser.js
    role: tooling
    hash: sha256:f9325ffe8e133f2aa7cacf06a8199c4a5e4895327e5925c5a3fb9babd8543cfb
    note: scripts/eval-parser.js

  - path: scripts/eval-public-claims.js
    role: tooling
    hash: sha256:ffb799ebe017ebc9408d5a859c7c8b493d693af9f5ec06c13016e381d8631061
    note: scripts/eval-public-claims.js

  - path: scripts/eval-temporal-status.js
    role: tooling
    hash: sha256:a7017986122a89262d34257387b5009aca45eb37704cbd59674161e4d1d438d0
    note: scripts/eval-temporal-status.js

  - path: scripts/eval-temporal-status-contract.js
    role: tooling
    hash: sha256:32426636d48463564b6b3e52199517bb38de1460660020b16c5012abc05eba91
    note: scripts/eval-temporal-status-contract.js

  - path: scripts/eval-record-schema.js
    role: tooling
    hash: sha256:7dabd8be1b39f4b8a9cdd2d51f6668cfa00837a4a5c1745f186f12eeabb258bf
    note: scripts/eval-record-schema.js

  - path: scripts/eval-redirects.js
    role: tooling
    hash: sha256:372e6c0af513d190c8fc4658ce8424246b27bdb09ad62e3e40cf0525c04784b5
    note: scripts/eval-redirects.js

  - path: scripts/eval-route-inventory.js
    role: tooling
    hash: sha256:7e5c35ed541f78a1100c128fbfca2d45835489133e89c207a2ca11a7efb9bdf9
    note: scripts/eval-route-inventory.js

  - path: scripts/eval-schema-parity.js
    role: tooling
    hash: sha256:f7780fb24cd6309f10469532f806ef0bd87d251a2f976f49a2c914f828a7ff84
    note: scripts/eval-schema-parity.js

  - path: scripts/eval-verification-allowlist.js
    role: tooling
    hash: sha256:74e52203bef779b577263c952e7efc145bdb64fcb72eb8be2848e6e80716c4c2
    note: scripts/eval-verification-allowlist.js

  - path: scripts/eval-verification-exit.js
    role: tooling
    hash: sha256:dacbffab5a3dd3da3be5a6a38ac4a7636dc3f884d31e753f37260cc7ea85d599
    note: scripts/eval-verification-exit.js

  - path: scripts/eval-scheduled-verification.js
    role: tooling
    hash: sha256:4a8b4259927fd567114ae8ec18aed1678100e9e1bfef1b990eb72942505f8f0a
    note: scripts/eval-scheduled-verification.js

  - path: scripts/eval-workflow-invariants.js
    role: tooling
    hash: sha256:6df4623787101c13d3adeae13a2483985edd84f1f425c3071fed5e84d5e591f4
    note: scripts/eval-workflow-invariants.js

  - path: scripts/evals.js
    role: tooling
    hash: sha256:245ba68a80e079ede31358c212efc2e803c0d7a638e7fb1cc79d39e4bd0a8bc3
    note: scripts/evals.js

  - path: scripts/lib/build-clock.js
    role: tooling
    hash: sha256:8dc8582146958ee6a69c66253c2f3a82cacfec3215aaad91c07755b0c5d22ecc
    note: scripts/lib/build-clock.js

  - path: scripts/lib/content.js
    role: tooling
    hash: sha256:64f0d3e0322c875c459aa2daee81d0895446094c3dc1da902186d4bb6ed5e6dd
    note: scripts/lib/content.js

  - path: scripts/lib/disclaimer.js
    role: tooling
    hash: sha256:18f9785b06a92bdb0487256ea99bf7b1009846b0deff8ae2cca294617ac7e2eb
    note: scripts/lib/disclaimer.js

  - path: scripts/lib/eval-kit.js
    role: tooling
    hash: sha256:33b76ef8d04ebcd8aa084a816aebc753d9ed1d75e0ed28c2a98d45153009098a
    note: scripts/lib/eval-kit.js

  - path: scripts/lib/mapping.js
    role: tooling
    hash: sha256:e14015638256cb5cc37da42665304a70ef8360e65e7e1a8c339874f7302c6c15
    note: scripts/lib/mapping.js

  - path: scripts/lib/obligation-first.js
    role: tooling
    hash: sha256:d32cabc7a2cf64392384e82271e51987bc2afe0e383843e8c6326faa5d1289f3
    note: scripts/lib/obligation-first.js

  - path: scripts/lib/temporal-status.js
    role: tooling
    hash: sha256:203e3d8f26aa8d5a15c4d1271f8cd909fcf884f11ba313283fe39e378a3d1a1f
    note: scripts/lib/temporal-status.js

  - path: scripts/lib/parse.js
    role: tooling
    hash: sha256:3d492b0fca79c55224afdd58f5477d87e97b31e613b97f0f2eacf0e853b01bf8
    note: scripts/lib/parse.js

  - path: scripts/lib/verify-policy.js
    role: tooling
    hash: sha256:647e61a061137ab9ab14d1fd1c856f5defa008427c87302e5744ea04fc2b7adb
    note: scripts/lib/verify-policy.js

  - path: scripts/ocr-pdf.sh
    role: tooling
    hash: sha256:5745a18de9e87ecc4b01e5405ffb94a26c59398b598d70dad18be84595361306
    note: scripts/ocr-pdf.sh

  - path: scripts/validate-hashes.sh
    role: tooling
    hash: sha256:dcf50fea6860c50c0b7c79a7229c5d9855ad49bcbad4a5db8f5bf8b0758bd3c9
    note: scripts/validate-hashes.sh

  - path: scripts/validate-obligation-first.js
    role: tooling
    hash: sha256:25d2ad4345a43fe679302dfc6a5401a21cd74e8a15f42287b5c476f3d456a26c
    note: scripts/validate-obligation-first.js

  - path: scripts/validate.js
    role: tooling
    hash: sha256:582a5ca556acee832d4f318d4549cbb6bac5cc4a0dd540dec6a40ae55d959bf2
    note: scripts/validate.js

  - path: scripts/verify.js
    role: tooling
    hash: sha256:6cd9bb385cde05652feb395b495d00a6ecf2faa8195c58742dba19fa346aae53
    note: scripts/verify.js

  - path: scripts/verify-ci.js
    role: tooling
    hash: sha256:953769545a22c2532bf0966bc074afa534549a0e44c68528645592fc36f9c820
    note: scripts/verify-ci.js

  - path: AGENTS.md
    role: agent-guidance
    hash: sha256:a0d37e6e49812e342c9016a9759fb6b36698372d195a36a976e01ee1f0a6e19b
    note: AGENTS.md

  - path: CLAUDE.md
    role: agent-guidance
    hash: sha256:fd22ce9692b922369d28ded92c71f20fcc5541422d0a579dab06301315440366
    note: CLAUDE.md

  - path: PROJECT_CONTEXT.md
    role: agent-guidance
    hash: sha256:daad3b13ca898e60fc04ad75b6dba66a03947b392ca90a7c9dc6a9656236a8f7
    note: PROJECT_CONTEXT.md

  - path: about/index.html
    role: site-source
    hash: sha256:4b3a2ad76459ac161da1aecf0d39bc179442eeb76eb584d012ccb081f91c72ea
    note: about/index.html

  - path: assets/search.js
    role: site-source
    hash: sha256:fc80f2715ccf656e45c02396fb6ac09b6ac9ab9fb5736b99fcca5e9a83b8451f
    note: assets/search.js

  - path: assets/styles.css
    role: site-source
    hash: sha256:3035d5ac8c92921bccdaee2f786b5e6f7aa8548fdc9645110bdc2070376b8e2f
    note: assets/styles.css

  - path: assets/tables.js
    role: site-source
    hash: sha256:4ea130b337a1696c85f9c98ebb3b8d391a1e00db690566f24bdcbf1433f39819
    note: assets/tables.js

  - path: assets/theme.js
    role: site-source
    hash: sha256:457a6516c901b6ead0fcdc487f3773ce66f7db524badac531186ec621abf9e53
    note: assets/theme.js

  - path: reference/disclaimer/index.html
    role: site-source
    hash: sha256:b587e019e6c2b591d6676f77517d84de2e286781d1625d73b7f66de27837152b
    note: reference/disclaimer/index.html

  - path: reference/index.html
    role: site-source
    hash: sha256:976beb2bc3fa00d7426f33379c50061ea9ee82f36ea5e0698ec703fb139fafce
    note: reference/index.html

  - path: reference/prior-art/index.html
    role: site-source
    hash: sha256:a46dd0e90b0e27d24b962f5bb7e70abf1da7cdcbc7bee3a648d39f3698c497ab
    note: reference/prior-art/index.html

  - path: reference/registry/index.html
    role: site-source
    hash: sha256:24fceeda4859ab71f8dd107b625c0f3dc74528257fd0b89a8c4a6898755a1f96
    note: reference/registry/index.html

  - path: reference/verify/index.html
    role: site-source
    hash: sha256:84eba64b88b72a028b0c869785ea1da09b8114ad1b12b93b5917b09457ad8d30
    note: reference/verify/index.html

  - path: reference/vocabulary/index.html
    role: site-source
    hash: sha256:258613f3461a78b3eb2005c64408c4cc92655e8594304c88634be5e9cef58d4e
    note: reference/vocabulary/index.html

  - path: vendor/gist/gistCore.ttl
    role: vendor
    hash: sha256:0d8230f3a4df9aa7782ec79bfa83def34a13a066f60d5f5ef0f00b9cecce08b1
    note: vendor/gist/gistCore.ttl

  - path: vendor/gist/LICENSE.txt
    role: vendor
    hash: sha256:9e5f1b3c610b9c2da5c313bf81d577a7d1acec686bdb0384edefa6df0f90cd94
    note: vendor/gist/LICENSE.txt

  - path: vendor/gist/UPSTREAM-README.md
    role: vendor
    hash: sha256:e7c54a4678c09fe90ad4d6a4bdf82f0e4d89130648bb2df2404e638a3760f9a7
    note: vendor/gist/UPSTREAM-README.md

  - path: vendor/gist/VERSION.md
    role: vendor
    hash: sha256:1bd18183661c4b62b6e0134380d0559460d419c8eff36d1def309dd194426363
    note: vendor/gist/VERSION.md
