{
  "payload": {
    "schema": "fixdossier-pro/pack-manifest-v1",
    "pack_id": "pack_9797e9e7c985b5a6",
    "status": "final",
    "org_id": "org_demo_acme",
    "org_login": "acme",
    "repo": "acme/payments-api",
    "generated_at": "2026-10-24T16:52:57Z",
    "created_by": "sara-sec",
    "source_ingest_id": "ing_9b751ae553c40707",
    "source_ingest_sha256": "91e237808f3644d30ee237009ec66bb4c9384c1d3efcbd3ca10e9184de003551",
    "last_audit_event_hash": "7c039454ca8068f6a4901b9166c1777ad07033a13740a6b49118b6a2f209dab3",
    "files": [
      {
        "name": "evidence-pack-acme-payments-api-2026-10-24.pdf",
        "sha256": "7268c89c14536bac7a522687860b1d518bb7ac5837b7466032d51c2138ad4066",
        "bytes": 10064
      },
      {
        "name": "security-record-reviewed.json",
        "sha256": "03ce08885879669c90deaca799a72885921b41e4c5f568b7bf33d4853e57f35e",
        "bytes": 20242
      },
      {
        "name": "SUPPORT.md",
        "sha256": "9fa6ec7810dcc1b8eede914779b3a53d8c54bd984e6a743c1ff249ff6084e425",
        "bytes": 812
      }
    ],
    "disclaimer": "Technical evidence collection and review support tool, not legal advice. Does not constitute a complete vulnerability inventory or a compliance certification."
  },
  "signing_key_id": "ed25519:0961c15ac1deac6c",
  "algorithm": "Ed25519",
  "public_key_hex": "0961c15ac1deac6cf20bf3671905c1e7a14d38b0813604aeb377a8a1b3a408da",
  "signature_hex": "e6c48566985cf39442e2eadaa7bcf1cc7c43bea3f722fc2445ad9ac42fc289ea4540c53f7e65606f5ca8c5d38b440d4160961b989585321aedff13a9c054dd02",
  "verification_instructions": "Verify online via POST https://app.fixdossier.dev/api/v1/verify with this pack-manifest.json body, or offline by serializing .payload as compact JSON and verifying the Ed25519 signature (signature_hex) with public_key_hex (0961c15ac1deac6cf20bf3671905c1e7a14d38b0813604aeb377a8a1b3a408da). Also verify sha256sum of each file in .payload.files."
}