{
  "signatures": [
    {
      "keyid": "SAMPLE-KEY-8508979fe4f58126",
      "sig": "U0FNUExFIFNJR05BVFVSRSAtIE5PVCBBIFJFQUwgU0lHTkFUVVJFLCBWRVJJRklDQVRJT04gTVVTVCBGQUlMIFtsYXlvdXRd"
    }
  ],
  "signed": {
    "_type": "layout",
    "expires": "2027-01-01T00:00:00Z",
    "readme": "SAMPLE in-toto layout for a fictional release pipeline. SAMPLE — fictional supply-chain data. Every package, registry, version, hash, licence, advisory identifier and signature in this document is invented.",
    "keys": {
      "SAMPLE-KEY-dcdf73735832f5ac": {
        "keytype": "ed25519",
        "scheme": "ed25519",
        "keyid_hash_algorithms": [
          "sha256"
        ],
        "keyval": {
          "public": "SAMPLE-PUBLIC-KEY-NOT-REAL-343db8bcaf823e81f9e12f330cb4ae81"
        }
      }
    },
    "steps": [
      {
        "_name": "checkout",
        "threshold": 1,
        "expected_materials": [],
        "expected_products": [
          [
            "CREATE",
            "src/*"
          ],
          [
            "DISALLOW",
            "*"
          ]
        ],
        "pubkeys": [
          "SAMPLE-KEY-dcdf73735832f5ac"
        ],
        "expected_command": [
          "git",
          "clone"
        ]
      },
      {
        "_name": "build",
        "threshold": 1,
        "expected_materials": [
          [
            "MATCH",
            "src/*",
            "WITH",
            "PRODUCTS",
            "FROM",
            "checkout"
          ],
          [
            "DISALLOW",
            "*"
          ]
        ],
        "expected_products": [
          [
            "CREATE",
            "dist/*"
          ],
          [
            "ALLOW",
            "src/*"
          ],
          [
            "DISALLOW",
            "*"
          ]
        ],
        "pubkeys": [
          "SAMPLE-KEY-dcdf73735832f5ac"
        ],
        "expected_command": [
          "npm",
          "run",
          "build"
        ]
      }
    ],
    "inspect": [
      {
        "_name": "verify-artifact",
        "expected_materials": [
          [
            "MATCH",
            "dist/*",
            "WITH",
            "PRODUCTS",
            "FROM",
            "build"
          ],
          [
            "DISALLOW",
            "*"
          ]
        ],
        "expected_products": [],
        "run": [
          "sha256sum",
          "dist/gateway.js"
        ]
      }
    ]
  }
}