{"schema":"orbis-build-provenance/1","attestation":{"available":false,"reason":"No signed build provenance yet. GitHub artifact attestations are refused for user-owned PRIVATE repositories (verified 2026-08-01: POST /repos/{owner}/{repo}/attestations → 422 \"Feature not available for user-owned private repositories\"). The deploy workflow already carries the attest step; it activates when the repository becomes public or moves to an organization on a plan that permits it. Until then the commit below is a CLAIM by this server, checkable against the source but not signed by anything outside it."},"recipe":"https://orbis.id/developers#provenance","commit":"20ad0673ff4cfe02a1e5ac04ddeb70b22c7af417","sourceDigest":"sha256:47d9ee0fab50c97d900f71126d9aa4ebd92a8b650588f00c41c86d97bfc46a01","observedSourceDigest":"sha256:784f0b7085a7a3009a3dd84615dbaa958e72b1a3eb996932a6f4a2517c95d2d0","matches":false,"divergence":{"missing":0,"changed":0,"extra":91}}