{
  "firmware_version": "0.9.0",
  "release": "beta20261002",
  "channel": "beta",
  "commit": "c0c78663092cb7830fc0e9248c3b452aa4d326dd",
  "buildroot_commit": "7c8edc1b402efcd7bba2dabfe0b3be877adaed7a",
  "selected_file_count": 4614,
  "selected_bytes": 90643245,
  "source_blob_verification": "every selected file SHA256, length and Git SHA1 blob matched retained snapshot descriptor",
  "artifacts": [
    {
      "filename": "buildroot-7c8edc1b.tar.gz",
      "size": 7008871,
      "sha256": "a2f24c43818effb772d32f09427d2bc3d81810cdbd23e730d51b95b519bf702d"
    },
    {
      "filename": "buildroot-matched-source-evidence-clean-v2.tar.gz",
      "size": 64520431,
      "sha256": "2961f33d2155b1c0a833fa16e6d1ff61169da66b6386458b8830f6c642ecd641"
    },
    {
      "filename": "DCENTOS_0.9.0_beta20261002_dcent-source-c0c7866-clean-v2.tar.gz",
      "size": 22533796,
      "sha256": "6031874a170d9b684a1cb3807e7a5166127d3fd2e2b19f09d628963302fcd04e"
    },
    {
      "filename": "buildroot-upstream-source-supplement.tar.gz",
      "size": 133799018,
      "sha256": "89ec4acd25ce2ccf43095a40b0708984d7132eb8d24f4a6ea494b3d3ae484e13"
    },
    {
      "filename": "buildroot-additional-upstream-sources.tar.gz",
      "size": 65226652,
      "sha256": "928f01b4870098e38aaa7c33749d6698cf2282ae2a04529d5d9093594fec4dfe"
    }
  ],
  "legal_record_matches": 186,
  "legal_record_missing": 72,
  "complete_firmware_corresponding_source_claim": false,
  "credential_scan": {
    "actual_credential_findings": 0,
    "synthetic_marker_file_findings": 8,
    "scope": "private key PEM markers and recognized AWS/GitHub/Slack token signatures"
  },
  "limitations": [
    "Third-party donor kernel and U-Boot exact corresponding source revisions unverified",
    "Proprietary boot binaries are not included",
    "Generated local package tarballs unavailable; original package source trees included",
    "Dependency/legal inventory coverage partial; no complete firmware corresponding source or license compliance claim",
    "Restricted GNU Linaro binary toolchain payload is withheld; metadata references may remain",
    "Unrelated Cvitek raw stock fixtures are omitted; fixture-dependent tests require separate private inputs"
  ],
  "maturity": "Experimental",
  "legal_record_withheld_restricted": 1,
  "excluded_vendor_fixture_count": 15,
  "third_party_finished_image_redistribution_permission": "unverified",
  "development_signing_approval_is_license_clearance": false
}