v0.0.4

Operator image

docker pull ghcr.io/jakehartnell/trustgraphs-operator:v0.0.4

Digest: sha256:1656285b28c526016ce259bb84528d04fce3b544edbb9e1ca89fe59e256141bd

Built by this workflow run
from 95faa6ff1fe99a40c4b485d6d3a61319687a5703, with a build-provenance attestation you can check without
an account:

gh attestation verify oci://ghcr.io/jakehartnell/trustgraphs-operator:v0.0.4 --repo JakeHartnell/trustgraphs

Guest programs

Every guest was built inside the pinned SP1 builder image, twice, on two cold
runners that share no state, and produced identical bytes before this release
was cut. Two cold builds rather than two architectures: the pinned SP1 builder
image is amd64-only, so an arm64 runner would run that same container under
emulation and compare a build against itself. guest-manifest.json is
attached; the same values are reproducible from source with:

sh scripts/build-guests.sh && sh scripts/guest-elf-digests.sh

program	ELF sha256	vkey
trust-graph	1ad727e35139b7db669430052a376b6850352c2fc5792a0f6815c7da21b7059d	0x003c8e19b8e12c260e5450a068c61460180b5cf93f03dc1214187a9ad3bdde5e
trust-graph-weighted	9c8d1d52b503bbbdf50f778521ab6391114a2107b293040403b98c814286eab8	0x0027625a41e9d165ab50ca4ff9afbc134385b99688a5fd69cdf03d5056f5abb2
trust-compose	d3947c0640498acc42ae4a292d8e65abccc833d9ff2f6791e749e3fc57fc8879	0x00e2847cc257d916a6422283094e8764296045e5f9ed8805b7aaa9b3dd6f7aed
signer-sync	9e4c6757fdfbf6e4f2ace056e902379f7fb362d3f0de6a79dcacc0827f40c715	0x00d1b981df6bee1682be2b212151d2ac74c30108215d8e949a84a604ae4baadb
contributions	1d6f6ce22e97c1be65a6a142dc238449c57f0eebef6e303217276d1d78d3fdd0	0x0083cb62532a5c855c0c1b61a1eb7b7d5d6d924784342ea661c80baf79cfa243
hypercerts	b70743d700464b31df81f87b73b653e38e58c0a1a0c600038eb98015dd0e491e	0x009890d8fed8be4836e060c25ad267049efbe79ce929b0e63c1e086007008d40
nostr-workspace	1dbe149fe811693397aac371e90a75552f8bb5d778074c838a1aa9e0daca2d42	0x003a7984610aa854a8daa012d2d78846ba663781c8fe3aa74fed99be047b6566