{
  "tool_id": "art-136-slsa-provenance-verifier",
  "note": "golden_hash empty until first `node golden-parity.test.mjs --update`.",
  "vectors": [
    {
      "name": "valid-slsa-build-level-2",
      "policy_parameters": {
        "statement": {
          "_type": "https://in-toto.io/Statement/v0.1",
          "predicateType": "https://slsa.dev/provenance/v1",
          "subject": [
            {
              "name": "app.tar.gz",
              "digest": {
                "sha256": "abc123def456"
              }
            }
          ],
          "predicate": {
            "runDetails": {
              "builder": {
                "id": "https://github.com/actions/runner/ubuntu-22.04@v2"
              }
            }
          }
        },
        "artifact_digest_sha256": "abc123def456",
        "claimed_build_level": 2
      },
      "output_payload": {
        "provenance_valid": true,
        "type_ok": true,
        "pred_ok": true,
        "subject_digest_match": true,
        "builder_id_present": true,
        "slsa_build_level": 2
      },
      "golden_hash": "b4b0d9f784d8abb616e271d3a0fa41a5190d3cf2d52e0514d044032cb14e6ede"
    },
    {
      "name": "invalid-digest-mismatch",
      "policy_parameters": {
        "statement": {
          "_type": "https://in-toto.io/Statement/v0.1",
          "predicateType": "https://slsa.dev/provenance/v1",
          "subject": [
            {
              "name": "app.tar.gz",
              "digest": {
                "sha256": "abc123def456"
              }
            }
          ],
          "predicate": {
            "runDetails": {
              "builder": {
                "id": "https://github.com/actions/runner/ubuntu-22.04@v2"
              }
            }
          }
        },
        "artifact_digest_sha256": "different_digest",
        "claimed_build_level": 1
      },
      "output_payload": {
        "provenance_valid": false,
        "type_ok": true,
        "pred_ok": true,
        "subject_digest_match": false,
        "builder_id_present": true,
        "slsa_build_level": 1
      },
      "golden_hash": "e7a80edc9d79ff2db1d550713efa636f9be7dedce87d45eb5d897068e3b21f2c"
    }
  ]
}