{
  "artifact": {
    "id": "acme-app-3.2.0",
    "name": "acme-app",
    "version": "3.2.0",
    "digest": {
      "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
    }
  },
  "sbom": {
    "format": "CycloneDX-like synthetic",
    "spec_version": "1.7-shaped instructional subset",
    "target": {
      "name": "acme-app",
      "version": "3.2.0",
      "digest": {
        "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      }
    },
    "components": [
      {
        "name": "acme-app",
        "version": "3.2.0",
        "purl": "pkg:generic/acme-app@3.2.0",
        "digest": {
          "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        }
      },
      {
        "name": "lib-alpha",
        "version": "1.4.2",
        "purl": "pkg:generic/lib-alpha@1.4.2",
        "digest": {
          "sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
        }
      },
      {
        "name": "lib-beta",
        "version": "2.0.1",
        "purl": "pkg:generic/lib-beta@2.0.1",
        "digest": {
          "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
        }
      }
    ],
    "dependencies": {
      "acme-app": [
        "lib-alpha"
      ],
      "lib-alpha": [
        "lib-beta"
      ],
      "lib-beta": []
    },
    "author": "Example Training Builder"
  },
  "provenance": {
    "_type": "https://in-toto.io/Statement/v1",
    "subject": [
      {
        "name": "acme-app-3.2.0",
        "digest": {
          "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        }
      }
    ],
    "predicateType": "https://slsa.dev/provenance/v1",
    "predicate": {
      "buildDefinition": {
        "buildType": "https://example.invalid/build-types/python-wheel/v1",
        "externalParameters": {
          "target": "release"
        },
        "resolvedDependencies": [
          {
            "uri": "git+https://example.invalid/acme/app",
            "digest": {
              "gitCommit": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://builder.example/secure/v1"
        },
        "metadata": {
          "invocationId": "build-015-001",
          "startedOn": "2026-09-17T08:00:00Z",
          "finishedOn": "2026-09-17T08:01:00Z"
        }
      }
    }
  },
  "attestation": {
    "identity": "attestor:test-build-A",
    "synthetic_verified": true
  }
}