v0.1.4

Operator image

docker pull ghcr.io/ainima-collective/trustgraphs-operator:v0.1.4

Digest: sha256:3834588af5769e935445fbbcd8dce904958063d228c59292a16cc357e4315053

Built by this workflow run
from 249466e71d0493649ed16a1bfb0d8e7411640502, with a build-provenance attestation you can check without
an account:

gh attestation verify oci://ghcr.io/ainima-collective/trustgraphs-operator:v0.1.4 --repo AInima-Collective/trustgraphs

Guest programs

Every guest was built inside the pinned SP1 builder image, twice, on two cold
runners that share no state, and produced identical bytes before this release
was cut. Two cold builds rather than two architectures: the pinned SP1 builder
image is amd64-only, so an arm64 runner would run that same container under
emulation and compare a build against itself. guest-manifest.json is
attached; the same values are reproducible from source with:

sh scripts/build-guests.sh && sh scripts/guest-elf-digests.sh

program	ELF sha256	vkey
trust-graph	446d12fab5a9cde882ca7d07499e2db750915c21696c3945f8fcb061b6435f6e	0x00bbf3b3cc5efe71ced29517bd09edac2720bcc795b7094a314db17c224dcea3
trust-graph-weighted	12e658843d2719b246f2898e3375610e65c255326a11df8ec16e57ae40142d95	0x0095b1a77a841e434307acdc8cd2340c3a82beda37cde4498170db3cdcc6eb80
trust-compose	d74643d1a62bf5951dcc3e3caee4e0d558a61f4fc0d8664509da277b31f0e082	0x00c6868afdf506311dcb1393a74f3c033ad0620ec25602b65d079227c88d9dfc
signer-sync	73ca7d5e2fd1516a83645aefe3ce8541fe76007d7416267a5169ff5dd6bbb912	0x00f8ad1fd05ff8c894a1e8906b3e1a1f9fba968d14ef8a121d3107d3c57df7fb
contributions	48603c146a0d7100f5a2a6e92ba518b6b7f9ca0d55816be1742d70f70e5a2480	0x0098fb1266d6ca97c12c529c29ef59b45dae9bede0cbe0990a2fbb1b4394d798
hypercerts	00cdda54fb2eccffed8b393cad91926a9560faa1341c0b7ae05248565b9222f0	0x0072790ce927dab3afab201f8517b7b0ac36764c825825f6a23d9ed3c080c8d2
nostr-workspace	3238e0ef525febdc094ed7d3fe1958ef93ddeddbb31599cd3d0d615d8ea121b7	0x00a8e5183dbdab1ff521c068ff2d2d8ed840f5beef4f516964d345a16bc302af