{
  "schema": "cosmo.standalone-verifier.provenance.v1",
  "verifier_name": "cosmo-standalone-verifier",
  "verifier_version": "1.3.1",
  "node_engine_min": ">=18",
  "trust_profile_id": "cosmo-trust-v4",
  "trust_profile_hash": "0xbc8649af49834f2089f1205e88e9fb8bdac9e1f4d15959d86582bb89ccd2cefb",
  "distributable": {
    "file": "cosmo-verify.mjs",
    "sha3": "0xe6ad18695f2cc0339c3da0323d8bdf1f951f0a77d7139e084d15d86bc06c7942"
  },
  "build_inputs": {
    "core.src.mjs": "0x83b6802792bf87e4972357ac4564713fe2e71809ea9af873e886e91949f0d00a",
    "build.mjs": "0xc63a16e112dc37aa0fd9f489cfeb75c4e92f715089b43e07ebcfce56ff31c432"
  },
  "vendored": {
    "@noble/hashes": {
      "version": "1.8.0",
      "license": "MIT"
    },
    "@noble/curves": {
      "version": "1.9.7",
      "license": "MIT"
    },
    "@suprafx/agent-sdk": {
      "version": "0.1.1",
      "license": "MIT",
      "file": "dist/src/sign-event.js",
      "sha3": "0x1f4fd56d1ece7e52a5d05a855b1cffb3483bbbc9368090c8dc037cd0a8c480db"
    }
  },
  "how_to_verify": [
    "Recompute sha3-256 of cosmo-verify.mjs and match distributable.sha3 (equals `node cosmo-verify.mjs --version`.source_sha3).",
    "To reproduce from source: confirm build_inputs hashes, run `node build.mjs`, and check the rebuilt cosmo-verify.mjs sha3 matches.",
    "ACCEPT from this verifier means: valid under trust profile cosmo-trust-v4 (0xbc8649af49834f2089f1205e88e9fb8bdac9e1f4d15959d86582bb89ccd2cefb)."
  ]
}